Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-16492 State: PUBLISHED Published: 2019-02-01T18:00:00 Last Updated: 2024-08-05T10:24:32.840Z Vendors: HackerOne Products: extend Problem Types: CWE-400 Description: A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/381185
CVE ID: CVE-2018-16493 State: PUBLISHED Published: 2019-02-01T18:00:00 Last Updated: 2024-08-05T10:24:32.903Z Vendors: HackerOne Products: static-resource-server Problem Types: CWE-548 Description: A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/432600
CVE ID: CVE-2018-16494 State: PUBLISHED Published: 2021-05-26T18:46:13 Last Updated: 2024-08-05T10:24:32.662Z Vendors: n/a Products: Versa VOS Problem Types: CWE-377 Description: In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1168191
CVE ID: CVE-2018-16495 State: PUBLISHED Published: 2021-05-26T18:46:08 Last Updated: 2024-08-05T10:24:32.613Z Vendors: n/a Products: Versa VOS Problem Types: CWE-384 Description: In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user successfully logs into the application. Failing to issue a new session ID following a successful login introduces the possibility for an attacker to set up a trap session on the device the victim is likely to login with. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1168192
CVE ID: CVE-2018-16496 State: PUBLISHED Published: 2021-05-26T18:46:03 Last Updated: 2024-08-05T10:24:32.993Z Vendors: n/a Products: Versa Director Problem Types: CWE-287 Description: In Versa Director, the un-authentication request found. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1168193
CVE ID: CVE-2018-16497 State: PUBLISHED Published: 2021-05-26T18:45:57 Last Updated: 2024-08-05T10:24:32.964Z Vendors: n/a Products: Versa Analytics Problem Types: CWE-269 Description: In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the server. If the job is run as the user root, there is a potential privilege escalation vulnerability. In this case, the job runs a script as root that is writable by users who are members of the versa group. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1168194
CVE ID: CVE-2018-16498 State: PUBLISHED Published: 2021-05-26T18:45:50 Last Updated: 2024-08-05T10:24:32.800Z Vendors: n/a Products: Versa Director Problem Types: CWE-312 Description: In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files. These credentials are for various application components such as SNMP, and SSL and Trust keystores. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1168195
CVE ID: CVE-2018-16499 State: PUBLISHED Published: 2021-05-26T18:45:44 Last Updated: 2024-08-05T10:24:32.993Z Vendors: n/a Products: Versa VOS Problem Types: CWE-326 Description: In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption protocols or cipher suites also violates the Data Protection TSR (Technical Security Requirements). Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1168196
CVE ID: CVE-2018-16509 State: PUBLISHED Published: 2018-09-05T06:00:00 Last Updated: 2024-08-05T10:24:32.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5516c614dc33662a2afdc377159f70218e67bde5 - https://www.exploit-db.com/exploits/45369/ - https://bugs.ghostscript.com/show_bug.cgi?id=699654 - https://
218e67bde5 - https://www.exploit-db.com/exploits/45369/ - https://bugs.ghostscript.com/show_bug.cgi?id=699654 - https://access.redhat.com/errata/RHSA-2018:2918 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=79cccf641486a6595c43f1de1cd7ade696020a31 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - https://www.artifex.com/news/ghostscript-security-resolved/ - https://access.redhat.com/errata/RHSA-2018:3760 - http://seclists.org/oss-sec/2018/q3/142 - https://www.debian.org/security/2018/dsa-4294 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - http://www.securityfocus.com/bid/105122 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba
nnounce/2018/09/msg00015.html - http://www.securityfocus.com/bid/105122 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=78911a01b67d590b4a91afac2e8417360b934156 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=520bb0ea7519aa3e79db78aaf0589dae02103764
CVE ID: CVE-2018-16510 State: PUBLISHED Published: 2018-09-05T06:00:00 Last Updated: 2024-08-05T10:24:32.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2018/08/27/4 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ea735ba37dc0fd5f5622
811-12 - https://usn.ubuntu.com/3768-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ea735ba37dc0fd5f5622d031830b9a559dec1cc9 - https://usn.ubuntu.com/3773-1/ - https://bugs.ghostscript.com/show_bug.cgi?id=699671
CVE ID: CVE-2018-16511 State: PUBLISHED Published: 2018-09-05T06:00:00 Last Updated: 2024-08-05T10:24:32.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3650 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0edd3d6c634a577db261615a9dc2719bca7f6e01 - https://www.a
-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0edd3d6c634a577db261615a9dc2719bca7f6e01 - https://www.artifex.com/news/ghostscript-security-resolved/ - https://www.debian.org/security/2018/dsa-4288 - https://bugs.ghostscript.com/show_bug.cgi?id=699659 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - http://seclists.org/oss-sec/2018/q3/182
CVE ID: CVE-2018-16513 State: PUBLISHED Published: 2018-09-05T13:00:00 Last Updated: 2024-08-05T10:24:32.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - https://www.artifex.com/news/ghostscript-security-resolved/ - https://bugs.ghostscript.com/show_bug.cgi?id=699655 - https://www.debian.org/security/2018/dsa-4288 - http://git.ghostsc
https://bugs.ghostscript.com/show_bug.cgi?id=699655 - https://www.debian.org/security/2018/dsa-4288 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=b326a71659b7837d3acde954b18bda1a6f5e9498 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-16514 State: PUBLISHED Published: 2019-06-20T13:18:36 Last Updated: 2024-08-05T10:24:32.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.php) in MantisBT 2.1.0 through 2.17.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-13055. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=24731
CVE ID: CVE-2018-16515 State: PUBLISHED Published: 2018-09-18T21:00:00 Last Updated: 2024-08-05T10:24:32.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/issues/3796#event-1833126269 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IRW7YR2H3ASUSYX4AO4KMY3FNVDNYW3P/ - https://matrix.org/blog/2018/09/06/critical-security-update-synapse-0-33-3-1/
CVE ID: CVE-2018-16516 State: PUBLISHED Published: 2018-09-05T14:00:00 Last Updated: 2024-08-05T10:24:32.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flask-admin/flask-admin/pull/1699 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZU2VKULURVXEU4YFTLMBQGYMPSXQ4MBN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJIYCWIH3BRLI2QNC53CQXLKVP27X7EH/
CVE ID: CVE-2018-16517 State: PUBLISHED Published: 2018-09-06T23:00:00 Last Updated: 2024-08-05T10:24:32.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392513 - https://fakhrizulkifli.github.io/CVE-2018-16517.html - https://www.exploit-db.com/exploits/46726/ - http://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html - http://lists.opensuse.org/opensuse-security-announce/
66/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
CVE ID: CVE-2018-16518 State: PUBLISHED Published: 2018-09-05T15:00:00Z Last Updated: 2024-09-17T00:46:27.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an executable file into a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ponypot/cve/blob/master/zed_watermarkExtension.pdf
CVE ID: CVE-2018-16519 State: PUBLISHED Published: 2019-03-17T21:39:01 Last Updated: 2024-08-05T10:24:32.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151467/COYO-9.0.8-10.0.11-12.0.4-Cross-Site-Scripting.html - https://seclists.org/bugtraq/2019/Feb/0 - https://www.coyoapp.de/en/blog - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-032.txt
CVE ID: CVE-2018-16521 State: PUBLISHED Published: 2018-09-05T15:00:00Z Last Updated: 2024-09-16T23:25:56.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openmrs/openmrs-module-htmlformentry/pull/138 - https://github.com/openmrs/openmrs-module-htmlformentry/pull/137
CVE ID: CVE-2018-16522 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T10:24:32.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/
CVE ID: CVE-2018-16523 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T10:24:32.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow division by zero in prvCheckOptions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrast
g.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/
CVE ID: CVE-2018-16524 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T10:24:32.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvCheckOptions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-com
lnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/
CVE ID: CVE-2018-16525 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T10:24:32.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in prvParseDNSReply. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ - https://blog.zimper
lob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/
CVE ID: CVE-2018-16526 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T10:24:32.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in usGenerateProtocolChecksum and prvProcessIPPacket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerab
tps://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/
CVE ID: CVE-2018-16527 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T10:24:32.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvProcessICMPPacket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-ri
ack-vulnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/
CVE ID: CVE-2018-16528 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T10:24:32.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_SecureConnect_Connect in AWS TLS connectivity modules. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-comp
nerabilities-details/ - https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/
CVE ID: CVE-2018-16529 State: PUBLISHED Published: 2019-03-28T16:02:03 Last Updated: 2024-08-05T10:24:32.794Z Vendors: Forcepoint Products: Forcepoint Email Security Problem Types: CWE-640 Description: A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2018/Nov/23 - https://help.forcepoint.com/security/CVE/CVE-2018-16529.html
CVE ID: CVE-2018-16530 State: PUBLISHED Published: 2019-04-09T18:47:04 Last Updated: 2024-08-05T10:24:32.909Z Vendors: Forcepoint Products: Forcepoint Email Security Problem Types: Stack-based Buffer Overflow Description: A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service. While no known Remote Code Execution (RCE) vulnerabilities exist, as with all buffer overflows, the possibility of RCE cannot be completely ruled out. Data Execution Protection (DEP) is already enabled on the Email appliance as a risk mitigation. Additional Analyst Notes: - CVE Program Container: Ref
) is already enabled on the Email appliance as a risk mitigation. Additional Analyst Notes: - CVE Program Container: References: - https://support.forcepoint.com/KBArticle?id=000016621 - https://help.forcepoint.com/security/CVE/CVE-2018-16530.html
CVE ID: CVE-2018-16531 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-16532 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-16533 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-16534 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-16535 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-16536 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-16537 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-16538 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-16539 State: PUBLISHED Published: 2018-09-05T18:00:00 Last Updated: 2024-08-05T10:24:32.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3650 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - https://www.artifex.com/news/ghostscript-security-resolved/ - https://www.debian.org/security/2018/dsa-4288 - https://lists.de
//www.artifex.com/news/ghostscript-security-resolved/ - https://www.debian.org/security/2018/dsa-4288 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - https://bugs.ghostscript.com/show_bug.cgi?id=699658 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=a054156d425b4dbdaaa9fda4b5f1182b27598c2b
CVE ID: CVE-2018-16540 State: PUBLISHED Published: 2018-09-05T18:00:00 Last Updated: 2024-08-05T10:24:32.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the interpreter or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:0229 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c432131c3fdb2143e148e8ba88555f7f7a63b25e - https://security.gentoo.org/glsa/201811-12 - https://bugs.ghostscript.com/show_b