Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-11462 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.563Z Vendors: Siemens AG Products: SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-264 Description: A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). By sending a specially crafted authentication request to the affected systems a remote attacker could escalate his privileges to an elevated user ac
ed authentication request to the affected systems a remote attacker could escalate his privileges to an elevated user account but not to root. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-1708
tainer: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11463 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.230Z Vendors: Siemens AG Products: SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-121 Description: A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). A buffer overflow in the service command application could allow a local attacker to execute code with elevated privileges. The security vulnerabili
vice command application could allow a local attacker to execute code with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11464 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.565Z Vendors: Siemens AG Products: SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-248 Description: A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). The integrated VNC server on port 5900/tcp of the affected products could allow a remote attacker to cause a Denial-of-Service condition of the VNC server. Please note that this vulnerability is only exploitable if port 5900/tcp is manually opened in the firewal
e VNC server. Please note that this vulnerability is only exploitable if port 5900/tcp is manually opened in the firewall configuration of network port X130. The security vulnerability could be exploited by an attacker with network access to the affected devices and port. Successful exploitation requires no privileges and no user interaction. The vulnerability could allow an attacker to compromise availability of the VNC server. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.
ner: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11465 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.330Z Vendors: Siemens AG Products: SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-248 Description: A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). A local attacker could use ioctl calls to do out of bounds reads, arbitrary writes, or execute code in kernel mode. The security vulnerability could
octl calls to do out of bounds reads, arbitrary writes, or execute code in kernel mode. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11466 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.337Z Vendors: Siemens AG Products: SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-248 Description: A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). Specially crafted network packets sent to port 102/tcp (ISO-TSAP) could allow a remote attacker to either cause a Denial-of-Service condition of the
ckets sent to port 102/tcp (ISO-TSAP) could allow a remote attacker to either cause a Denial-of-Service condition of the integrated software firewall or allow to execute code in the context of the software firewall. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 102/tcp. Successful exploitation requires no user privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known Additional Analyst Notes: - CVE Program Container: References: - http:
oitation of this security vulnerability was known Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11468 State: PUBLISHED Published: 2018-05-25T13:00:00 Last Updated: 2024-08-05T08:10:14.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Orc/discount/issues/189 - https://lists.debian.org/debian-lts-announce/2018/09/msg00009.html - https://www.debian.org/security/2018/dsa-4293
CVE ID: CVE-2018-11469 State: PUBLISHED Published: 2018-05-25T14:00:00 Last Updated: 2024-08-05T08:10:14.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request, related to the proto_http.c check_request_for_cacheability function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104347 - https://usn.ubuntu.com/3663-1/ - https://git.haproxy.org/?p=haproxy-1.8.git%3Ba=commit%3Bh=17514045e5d934dede62116216c1b016fe23dd06 - http
.com/3663-1/ - https://git.haproxy.org/?p=haproxy-1.8.git%3Ba=commit%3Bh=17514045e5d934dede62116216c1b016fe23dd06 - https://access.redhat.com/errata/RHSA-2019:1436
CVE ID: CVE-2018-11470 State: PUBLISHED Published: 2018-05-25T14:00:00Z Last Updated: 2024-09-17T00:21:12.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hi-KK/CVE-Hunter/blob/master/3.md
CVE ID: CVE-2018-11471 State: PUBLISHED Published: 2018-05-25T19:00:00 Last Updated: 2024-08-05T08:10:14.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cockpit 0.5.5 has XSS via a collection, form, or region. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nikhil1232/Cockpit-CMS-XSS-POC
CVE ID: CVE-2018-11472 State: PUBLISHED Published: 2018-05-25T19:00:00 Last Updated: 2024-08-05T08:10:14.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 has Reflected XSS during Login (i.e., the login parameter to admin/index.php). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nikhil1232/Monstra-CMS-3.0.4-Reflected-XSS-On-Login- - https://github.com/monstra-cms/monstra/issues/445
CVE ID: CVE-2018-11473 State: PUBLISHED Published: 2018-05-25T19:00:00 Last Updated: 2024-08-05T08:10:14.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users/registration). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/446 - https://github.com/nikhil1232/Monstra-CMS-3.0.4-XSS-ON-Registration-Page
CVE ID: CVE-2018-11474 State: PUBLISHED Published: 2018-05-25T19:00:00 Last Updated: 2024-08-05T08:10:14.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at admin/index.php?id=users&action=edit&user_id=1 does not invalidate a session that is open in a different browser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/444
CVE ID: CVE-2018-11475 State: PUBLISHED Published: 2018-05-25T19:00:00 Last Updated: 2024-08-05T08:10:14.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1/edit does not invalidate a session that is open in a different browser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/443
CVE ID: CVE-2018-11476 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-05T08:10:14.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The dongle opens an unprotected wireless LAN that cannot be configured with encryption or a password. This enables anyone within the range of the WLAN to connect to the network without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/unprotected-wifi-access-unencrypted-data-transfer-in-vgate-icar2-wifi-obd2-dongle/ - http://seclists.org/fulldisclosure/2018/May/66
CVE ID: CVE-2018-11477 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-05T08:10:14.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are not encrypted. The combination of this vulnerability with the lack of wireless network protection exposes all transferred car data to the public. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/unprotected-wifi-access-unencrypted-data-transfer-in-vgate-icar2-wifi-obd2-dongle/ - http://seclists.org/fulldisc
sories/unprotected-wifi-access-unencrypted-data-transfer-in-vgate-icar2-wifi-obd2-dongle/ - http://seclists.org/fulldisclosure/2018/May/66
CVE ID: CVE-2018-11478 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-05T08:10:14.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The OBD port is used to receive measurement data and debug information from the car. This on-board diagnostics feature can also be used to send commands to the car (different for every vendor / car product line / car). No authentication is needed, which allows attacks from the local Wi-Fi network. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/unprotected-wifi-access-unencrypted-data-transfer-in-
iner: References: - https://www.sec-consult.com/en/blog/advisories/unprotected-wifi-access-unencrypted-data-transfer-in-vgate-icar2-wifi-obd2-dongle/ - http://seclists.org/fulldisclosure/2018/May/66
CVE ID: CVE-2018-11479 State: PUBLISHED Published: 2018-05-25T19:00:00 Last Updated: 2024-08-05T08:10:14.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \\.\pipe\WindscribeService named pipe endpoint that allows the Windscribe VPN process to connect and execute an OpenVPN process or other processes (like taskkill, etc.). There is no validation of the program name before constructing the lpCommandLine argument for a CreateProcess call. An attacker can run any malicious process with SYSTEM privileges through this named pipe. Ad
t for a CreateProcess call. An attacker can run any malicious process with SYSTEM privileges through this named pipe. Additional Analyst Notes: - CVE Program Container: References: - http://sqlulz.blogspot.com/2018/05/windscribe-vpn-privilege-escalation.html - http://packetstormsecurity.com/files/156222/Windscribe-WindscribeService-Named-Pipe-Privilege-Escalation.html
CVE ID: CVE-2018-11481 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-05T08:10:14.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yough3rt/IOT-pwn-for-fun/blob/master/TP-LINK-websys-Authenticated-RCE
CVE ID: CVE-2018-11482 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-05T08:10:14.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yough3rt/IOT-pwn-for-fun/blob/master/TP-LINK-login-Escalation-of-Privileges
CVE ID: CVE-2018-11485 State: PUBLISHED Published: 2018-06-01T15:00:00 Last Updated: 2024-08-05T08:10:14.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MULTIDOTS WooCommerce Quick Reports plugin 1.0.6 and earlier for WordPress is vulnerable to Stored XSS. It allows an attacker to inject malicious JavaScript code on the WooCommerce -> Orders admin page. The attack is possible by modifying the "referral_site" cookie to have an XSS payload, and placing an order. Additional Analyst Notes: - CVE Program Container: References: - http://labs.threatpress.com/stored-cross-site-scripting-xss-in-woocommerce-quick-reports-plugin/
CVE ID: CVE-2018-11486 State: PUBLISHED Published: 2018-06-01T15:00:00 Last Updated: 2024-08-05T08:10:14.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress. This plugin is vulnerable to a stored Cross-site scripting (XSS) vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScript code in the Custom CSS textarea field, which will be loaded on every site page. Additional Analyst Notes: - CVE Program Container: References: - http://labs.threatpress.com/stored-cross-site-scripting-xss-in-advance-search-for-woocommerce-plugin/
CVE ID: CVE-2018-11487 State: PUBLISHED Published: 2018-05-26T15:00:00 Last Updated: 2024-08-05T08:10:14.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gaozhifeng/PHPMyWind/issues/2
CVE ID: CVE-2018-11488 State: PUBLISHED Published: 2018-05-29T07:00:00 Last Updated: 2024-08-05T08:10:14.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack exhaustion vulnerability in the search function of dtSearch 7.90.8538.1 and prior allows remote attackers to cause a denial of service condition by sending a specially crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.dtsearch.com/ReleaseNotesBeta.html - https://github.com/bitsadmin/exploits/tree/master/CVE-2018-11488 - https://www.dtsearch.com/ReleaseNotes.html
CVE ID: CVE-2018-11489 State: PUBLISHED Published: 2018-05-26T18:00:00 Last Updated: 2024-08-05T08:10:14.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104341 - https://github.com/pts/sam2p/issues/37 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b0777
.com/pts/sam2p/issues/37 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2018-11490 State: PUBLISHED Published: 2018-05-26T00:00:00 Last Updated: 2024-08-05T08:10:14.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCode - 2" array index is not checked. This will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104327 - https://github.com/pts/sam2p/issues/38 - https://usn.ubuntu.com/4107-1/ - https://lists.debian.org/debian-lts-announ
7 - https://github.com/pts/sam2p/issues/38 - https://usn.ubuntu.com/4107-1/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00008.html
CVE ID: CVE-2018-11491 State: PUBLISHED Published: 2018-07-25T13:00:00 Last Updated: 2024-08-05T08:10:14.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution. Additional Analyst Notes: - CVE Program Container: References: - https://mars-cheng.github.io/blog/2018/CVE-2018-11491/ - https://www.asus.com/tw/News/qnEosWKPVDpmOeqL
CVE ID: CVE-2018-11492 State: PUBLISHED Published: 2018-08-10T16:00:00 Last Updated: 2024-08-05T08:10:14.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS HG100 devices allow denial of service via an IPv4 packet flood. Additional Analyst Notes: - CVE Program Container: References: - https://mars-cheng.github.io/blog/2018/CVE-2018-11492/ - https://www.exploit-db.com/exploits/46720/ - http://packetstormsecurity.com/files/152542/ASUS-HG100-Denial-Of-Service.html
CVE ID: CVE-2018-11493 State: PUBLISHED Published: 2018-05-26T18:00:00Z Last Updated: 2024-09-16T23:42:10.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a friendship link via index.php?m=link&f=index&v=add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/137
CVE ID: CVE-2018-11494 State: PUBLISHED Published: 2018-05-26T20:00:00 Last Updated: 2024-08-05T08:10:14.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name (containing 10 random digits) via a directory traversal attack involving language_info['code']. Additional Analyst Notes: - CVE Program Container: References: - http://www.bigdiao.cc/2018/05/24/Opencart-v3-0-2-0/
CVE ID: CVE-2018-11495 State: PUBLISHED Published: 2018-05-26T20:00:00 Last Updated: 2024-08-05T08:10:14.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.bigdiao.cc/2018/05/24/Opencart-v3-0-2-0/
CVE ID: CVE-2018-11496 State: PUBLISHED Published: 2018-05-26T20:00:00 Last Updated: 2024-08-05T08:10:14.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c lacks certain size validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/96 - https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html
CVE ID: CVE-2018-11498 State: PUBLISHED Published: 2018-05-26T20:00:00 Last Updated: 2024-08-05T08:10:14.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer size during a memcpy in the Lizard_decompress_LIZv1 function (lib/lizard_decompress_liz.h). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file, as well as achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inikep/lizard/issues/16
CVE ID: CVE-2018-11499 State: PUBLISHED Published: 2018-05-26T20:00:00 Last Updated: 2024-08-05T08:10:14.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2643 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html - http://lists.opensuse.org/opensuse-sec