Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
: References: - http://packetstormsecurity.com/files/148334/PRTG-Command-Injection.html - https://www.exploit-db.com/exploits/46527/ - http://www.securityfocus.com/archive/1/542103/100/0/threaded - http://packetstormsecurity.com/files/161183/PRTG-Network-Monitor-Remote-Code-Execution.html
CVE ID: CVE-2018-9279 State: PUBLISHED Published: 2018-10-24T21:00:00 Last Updated: 2024-08-05T07:17:52.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user's password. The web page displayed by the appliance contains the password in cleartext. Passwords could be retrieved by browsing the source code of the webpage. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/
CVE ID: CVE-2018-9280 State: PUBLISHED Published: 2018-10-24T21:00:00 Last Updated: 2024-08-05T07:17:52.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/
CVE ID: CVE-2018-9281 State: PUBLISHED Published: 2018-10-24T21:00:00 Last Updated: 2024-08-05T07:17:52.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on the change-password functionality. This vulnerability could be used to force a logged-in administrator to perform a silent password update. The affected forms are also vulnerable to Reflected Cross-Site Scripting vulnerabilities. This flaw could be triggered by driving an administrator logged into the Eaton application to a specially crafted web page. This attack could be done silently. Additional Analyst Notes:
nto the Eaton application to a specially crafted web page. This attack could be done silently. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/eaton-ups-9px-8000-sp-multiple-vulnerabilities/
CVE ID: CVE-2018-9282 State: PUBLISHED Published: 2018-09-21T16:00:00 Last Updated: 2024-08-05T07:17:52.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a user's session, or elevate privileges by targeting an administrative user. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/
CVE ID: CVE-2018-9283 State: PUBLISHED Published: 2018-09-07T22:00:00 Last Updated: 2024-08-05T07:17:52.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting (XSS) vulnerabilities in the firstname, lastname, billing_address-address, billing_address-zipcode, billing_address-city, billing_address-department, shipping_address-address, shipping_address-zipcode, shipping_address-city, and shipping_address-department parameters in the contact creation and modification page. The payload is stored within the application database and allows the execution of JavaScript code each time a client vis
The payload is stored within the application database and allows the execution of JavaScript code each time a client visit an infected page. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/08/cremecrm-1-6-12-multiple-vulnerabilities/
CVE ID: CVE-2018-9284 State: PUBLISHED Published: 2018-04-04T19:00:00Z Last Updated: 2024-09-16T22:50:30.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortinet.com/blog/threat-research/fortiguard-labs-discovers-vulnerability-in--d-link-router-dir868.html - http://www.dlink.com.sg/dir-868l/#firmware
CVE ID: CVE-2018-9285 State: PUBLISHED Published: 2018-04-04T19:00:00 Last Updated: 2024-08-05T07:17:52.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortinet.com/blog/threat-research/fortiguard-labs-discovers-vu
Notes: - CVE Program Container: References: - https://www.fortinet.com/blog/threat-research/fortiguard-labs-discovers-vulnerability-in-asus-router.html - https://fortiguard.com/zeroday/FG-VD-17-216 - http://packetstormsecurity.com/files/160049/ASUS-TM-AC1900-Arbitrary-Command-Execution.html
CVE ID: CVE-2018-9302 State: PUBLISHED Published: 2018-05-02T15:00:00 Last Updated: 2024-08-05T07:17:52.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14611, which was about version 0.13.0, which (surprisingly) is an earlier version than 0.4.4. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/10 - https://www.exploit-db.com/exploits/44567/
CVE ID: CVE-2018-9303 State: PUBLISHED Published: 2018-04-04T21:00:00 Last Updated: 2024-08-05T07:17:52.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md - https://security.gentoo.org/glsa/201811-14
CVE ID: CVE-2018-9304 State: PUBLISHED Published: 2018-04-04T21:00:00 Last Updated: 2024-08-05T07:17:51.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md - https://github.com/Exiv2/exiv2/issues/262 - https://security.gentoo.org/glsa/201811-14
CVE ID: CVE-2018-9305 State: PUBLISHED Published: 2018-04-04T21:00:00 Last Updated: 2024-08-05T07:17:52.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/263 - https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md - https://security.gentoo.org/glsa/201811-14 - https://access.redhat.com/errata/RHSA-2019:2101 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
CVE ID: CVE-2018-9306 State: REJECTED Published: 2018-04-04T21:00:00 Last Updated: 2018-04-19T20:57:01 Description: No description available.
CVE ID: CVE-2018-9307 State: PUBLISHED Published: 2018-04-04T21:00:00Z Last Updated: 2024-09-16T20:17:39.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuheunbaicai/cangku/blob/master/cve/%E9%AD%94%E6%96%B9%E5%8A%A8%E5%8A%9B_Latest%20version_bug.md
CVE ID: CVE-2018-9309 State: PUBLISHED Published: 2018-04-05T01:00:00 Last Updated: 2024-08-05T07:17:51.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dl_sendsms.php request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lihonghuyang/vulnerability/blob/master/dl_sendsms.php.md
CVE ID: CVE-2018-9310 State: PUBLISHED Published: 2018-04-30T17:00:00 Last Updated: 2024-08-05T07:17:52.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MagniComp SysInfo before 10-H82 if setuid root (the default). This vulnerability allows any local user on a Linux/UNIX system to run SysInfo and obtain a root shell, which can be used to compromise the local system. Additional Analyst Notes: - CVE Program Container: References: - http://www.magnicomp.com/about/2018/CVE-2018-9310.html
CVE ID: CVE-2018-9311 State: PUBLISHED Published: 2018-05-31T12:00:00 Last Updated: 2024-08-05T07:17:52.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network. Additional Analyst Notes: - CVE Program Container: References: - https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ - http://www.securityfocus.com/bid/104258
CVE ID: CVE-2018-9312 State: PUBLISHED Published: 2018-05-31T12:00:00 Last Updated: 2024-08-05T07:17:51.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in. Additional Analyst Notes: - CVE Program Container: References: - https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ - http://www.securityfocus.com/bid/104258
CVE ID: CVE-2018-9313 State: PUBLISHED Published: 2018-05-31T12:00:00 Last Updated: 2024-08-05T07:17:51.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mode, leading to a Head Unit reboot. Additional Analyst Notes: - CVE Program Container: References: - https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ - http://www.securityfocus.com/bid/104258
CVE ID: CVE-2018-9314 State: PUBLISHED Published: 2018-05-31T12:00:00 Last Updated: 2024-08-05T07:17:52.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access. Additional Analyst Notes: - CVE Program Container: References: - https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ - http://www.securityfocus.com/bid/104258
CVE ID: CVE-2018-9315 State: REJECTED Published: 2018-04-06T16:00:00 Last Updated: 2018-04-06T15:57:01 Description: No description available.
CVE ID: CVE-2018-9316 State: REJECTED Published: 2018-04-06T16:00:00 Last Updated: 2018-04-06T15:57:01 Description: No description available.
CVE ID: CVE-2018-9317 State: REJECTED Published: 2018-04-06T16:00:00 Last Updated: 2018-04-06T15:57:01 Description: No description available.
CVE ID: CVE-2018-9318 State: PUBLISHED Published: 2018-05-31T12:00:00 Last Updated: 2024-08-05T07:17:52.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network. Additional Analyst Notes: - CVE Program Container: References: - https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ - http://www.securityfocus.com/bid/104258
CVE ID: CVE-2018-9319 State: REJECTED Published: 2018-04-06T16:00:00 Last Updated: 2018-04-06T15:57:01 Description: No description available.
CVE ID: CVE-2018-9320 State: PUBLISHED Published: 2018-05-31T12:00:00 Last Updated: 2024-08-05T07:17:52.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in. Additional Analyst Notes: - CVE Program Container: References: - https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ - http://www.securityfocus.com/bid/104258
CVE ID: CVE-2018-9321 State: REJECTED Published: 2018-04-06T16:00:00 Last Updated: 2018-04-06T15:57:01 Description: No description available.
CVE ID: CVE-2018-9322 State: PUBLISHED Published: 2018-05-31T12:00:00 Last Updated: 2024-08-05T07:17:52.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interface. An attacker can bypass the code-signing protection mechanism for firmware updates, and consequently obtain a root shell. Additional Analyst Notes: - CVE Program Container: References: - https://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - https://www.theregister.co.u
ttps://keenlab.tencent.com/en/Experimental_Security_Assessment_of_BMW_Cars_by_KeenLab.pdf - https://www.theregister.co.uk/2018/05/23/bmw_security_bugs/ - http://www.securityfocus.com/bid/104258
CVE ID: CVE-2018-9323 State: REJECTED Published: 2018-04-06T16:00:00 Last Updated: 2018-04-06T15:57:01 Description: No description available.
CVE ID: CVE-2018-9324 State: REJECTED Published: 2018-04-06T16:00:00 Last Updated: 2018-04-06T15:57:01 Description: No description available.
CVE ID: CVE-2018-9325 State: PUBLISHED Published: 2018-04-07T21:00:00 Last Updated: 2024-08-05T07:17:51.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an instance without knowledge of pad names. Additional Analyst Notes: - CVE Program Container: References: - http://blog.etherpad.org/2018/04/07/important-release-1-6-4/
CVE ID: CVE-2018-9326 State: PUBLISHED Published: 2018-04-07T21:00:00 Last Updated: 2024-08-05T07:17:52.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherpad 1.6.3 before 1.6.4 allows an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://blog.etherpad.org/2018/04/07/important-release-1-6-4/
CVE ID: CVE-2018-9327 State: PUBLISHED Published: 2018-04-07T21:00:00 Last Updated: 2024-08-05T07:17:51.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server. The instance has to be configured to use a document database (DirtyDB, CouchDB, MongoDB, or RethinkDB). Additional Analyst Notes: - CVE Program Container: References: - http://blog.etherpad.org/2018/04/07/important-release-1-6-4/
CVE ID: CVE-2018-9328 State: PUBLISHED Published: 2018-04-05T19:00:00Z Last Updated: 2024-09-16T16:28:41.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the ter_from or tag parameter to results.php. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/SbjwbYVr
CVE ID: CVE-2018-9329 State: REJECTED Published: 2018-04-06T03:00:00 Last Updated: 2018-04-12T22:57:01 Description: No description available.
CVE ID: CVE-2018-9330 State: PUBLISHED Published: 2018-04-07T17:00:00 Last Updated: 2024-08-05T07:17:52.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=LRK3c_DhXn4
CVE ID: CVE-2018-9331 State: PUBLISHED Published: 2018-04-07T02:00:00 Last Updated: 2024-08-05T07:17:52.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leveraged for database access by deleting install.lock. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cherryla/zzcms/blob/master/adv.php.md
CVE ID: CVE-2018-9332 State: PUBLISHED Published: 2021-01-11T15:31:38 Last Updated: 2024-08-05T07:17:52.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local). Additional Analyst Notes: - CVE Program Container: References: - http://k7computing.com - http://k7antivirus.com - https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
CVE ID: CVE-2018-9333 State: PUBLISHED Published: 2021-01-11T15:33:44 Last Updated: 2024-08-05T07:17:51.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe. Additional Analyst Notes: - CVE Program Container: References: - http://k7computing.com - http://k7antivirus.com - https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
CVE ID: CVE-2018-9334 State: PUBLISHED Published: 2018-07-03T21:00:00 Last Updated: 2024-08-05T07:17:51.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.8 and earlier, and PAN-OS 8.1.0 may allow an attacker to access the GlobalProtect password hashes of local users via manipulation of the HTML markup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041243 - http://www.securityfocus.com/bid/104677 - https://security.paloaltonetworks.com/CVE-2018-9334
CVE ID: CVE-2018-9335 State: PUBLISHED Published: 2018-07-03T21:00:00 Last Updated: 2024-08-05T07:17:52.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PAN-OS session browser in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104658 - http://www.securitytracker.com/id/1041241 - https://security.paloaltonetworks.com/CVE-2018-9335
CVE ID: CVE-2018-9336 State: PUBLISHED Published: 2018-05-01T18:00:00 Last Updated: 2024-08-05T07:17:52.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenVPN/openvpn/releases/tag/v2.4.6 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m
hub.com/OpenVPN/openvpn/releases/tag/v2.4.6 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m=slackware-security.568761 - https://www.tenable.com/security/research/tra-2018-09 - https://github.com/OpenVPN/openvpn/commit/1394192b210cb3c6624a7419bcf3ff966742e79b - https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
CVE ID: CVE-2018-9337 State: PUBLISHED Published: 2018-07-03T21:00:00 Last Updated: 2024-08-05T07:17:52.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041240 - http://www.securityfocus.com/bid/104657 - https://security.paloaltonetworks.com/CVE-2018-9337
CVE ID: CVE-2018-9338 State: PUBLISHED Published: 2024-11-19T18:11:08.553Z Last Updated: 2024-11-21T16:15:04.571Z Vendors: Google Products: Android Description: In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9339 State: PUBLISHED Published: 2024-11-19T18:45:21.601Z Last Updated: 2024-11-20T16:31:48.607Z Vendors: Google Products: Android Description: In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9340 State: PUBLISHED Published: 2024-11-19T18:48:52.988Z Last Updated: 2024-11-20T16:26:20.293Z Vendors: Google Products: Android Description: In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01
CVE ID: CVE-2018-9341 State: PUBLISHED Published: 2024-11-19T18:51:40.920Z Last Updated: 2024-11-20T16:21:22.527Z Vendors: Google Products: Android Description: In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2018-06-01