Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
//lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/ - https://lists.fedoraproject.org/archives/
announce%40lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/ - https://security.netapp.com/advisory/ntap-20190416-0010/ - https://usn.ubuntu.com/4127-2/ - https://usn.ubuntu.com/4127-1/ - https://access.redhat.com/errata/RHSA-2019:3725 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html
CVE ID: CVE-2018-20407 State: PUBLISHED Published: 2018-12-23T23:00:00Z Last Updated: 2024-09-16T18:04:25.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/343
CVE ID: CVE-2018-20408 State: PUBLISHED Published: 2018-12-23T23:00:00Z Last Updated: 2024-09-17T03:22:41.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated by mp42hls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/343
CVE ID: CVE-2018-20409 State: PUBLISHED Published: 2018-12-23T23:00:00Z Last Updated: 2024-09-17T01:52:00.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/345
CVE ID: CVE-2018-20410 State: PUBLISHED Published: 2018-12-24T02:00:00Z Last Updated: 2024-09-16T16:18:42.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability is triggered when sending a specially crafted packet to the AlarmServer (AEserver.exe) service listening on TCP port 12401. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flypuma/vul/blob/master/kingview/copy_argumengt_overflow/poc.py - https://github.com/flypuma/vul/blob/master/kingview/copy_argumengt_overflow/Debugging.md
CVE ID: CVE-2018-20418 State: PUBLISHED Published: 2018-12-24T04:00:00 Last Updated: 2024-08-05T11:58:19.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rdincel1/Craft-CMS-3.0.25---Cross-Site-Scripting - https://www.raifberkaydincel.com/craft-cms-3-0-25-cross-site-scripting-vulnerability.html - https://www.exploit-db.com/exploits/46054/ - https://github.com/craftcms/cms/blob/master/CHANGELOG-v3.md
CVE ID: CVE-2018-20419 State: PUBLISHED Published: 2018-12-24T03:00:00Z Last Updated: 2024-09-16T19:05:30.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Jxysir/Douphpcms/blob/master/POC
CVE ID: CVE-2018-20420 State: PUBLISHED Published: 2018-12-24T03:00:00Z Last Updated: 2024-09-17T04:24:26.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the target web site by creating a template and then using ../ directory traversal in the TemplateName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddietcc/CVEnotes/blob/master/webERP_4.15_Z_CreateCompanyTemplateFile/README.md
CVE ID: CVE-2018-20421 State: PUBLISHED Published: 2018-12-24T03:00:00Z Last Updated: 2024-09-17T01:41:26.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ethereum/go-ethereum/issues/18289
CVE ID: CVE-2018-20422 State: PUBLISHED Published: 2018-12-24T04:00:00 Last Updated: 2024-08-05T11:58:19.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed). Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUI
CVE ID: CVE-2018-20423 State: PUBLISHED Published: 2018-12-24T04:00:00 Last Updated: 2024-08-05T11:58:19.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUI
CVE ID: CVE-2018-20424 State: PUBLISHED Published: 2018-12-24T04:00:00 Last Updated: 2024-08-05T11:58:19.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IPRUI
CVE ID: CVE-2018-20425 State: PUBLISHED Published: 2018-12-24T05:00:00 Last Updated: 2024-08-05T11:58:19.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/163
CVE ID: CVE-2018-20426 State: PUBLISHED Published: 2018-12-24T05:00:00 Last Updated: 2024-08-05T11:58:19.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/162
CVE ID: CVE-2018-20427 State: PUBLISHED Published: 2018-12-24T05:00:00 Last Updated: 2024-08-05T11:58:18.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/164
CVE ID: CVE-2018-20428 State: PUBLISHED Published: 2018-12-24T05:00:00 Last Updated: 2024-08-05T11:58:19.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/161
CVE ID: CVE-2018-20429 State: PUBLISHED Published: 2018-12-24T05:00:00 Last Updated: 2024-08-05T11:58:19.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/160
CVE ID: CVE-2018-20430 State: PUBLISHED Published: 2018-12-24T05:00:00 Last Updated: 2024-08-05T11:58:19.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00015.html - https://www.debian.org/security/2018/dsa-4361 - https://gnunet.org/git/libextractor.git/tree/ChangeLog - http://www.securityfocus.com/bid/106300 - https://gnunet.org/git/libextractor.git/commit/?id=b4
tor.git/tree/ChangeLog - http://www.securityfocus.com/bid/106300 - https://gnunet.org/git/libextractor.git/commit/?id=b405d707b36e0654900cba78e89f49779efea110 - https://gnunet.org/bugs/view.php?id=5493
CVE ID: CVE-2018-20431 State: PUBLISHED Published: 2018-12-24T05:00:00 Last Updated: 2024-08-05T11:58:19.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c. Additional Analyst Notes: - CVE Program Container: References: - https://gnunet.org/bugs/view.php?id=5494 - https://lists.debian.org/debian-lts-announce/2018/12/msg00015.html - https://www.debian.org/security/2018/dsa-4361 - https://gnunet.org/git/libextractor.git/tree/ChangeLog - https://gnunet.org/git/libextractor.git/commit/?id=489c4a540bb2c4744471441425b8932b97a153e7 - http://www.securi
ngeLog - https://gnunet.org/git/libextractor.git/commit/?id=489c4a540bb2c4744471441425b8932b97a153e7 - http://www.securityfocus.com/bid/106300
CVE ID: CVE-2018-20432 State: PUBLISHED Published: 2020-09-14T13:41:04 Last Updated: 2024-08-05T11:58:19.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/159058/COVR-3902-1.01B0-Hardcoded-Credentials.html - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10109 - https://cybersecurityworks.com/zerodays/cve-
portannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10109 - https://cybersecurityworks.com/zerodays/cve-2018-20432-dlink.html
CVE ID: CVE-2018-20433 State: PUBLISHED Published: 2018-12-24T13:00:00 Last Updated: 2024-08-05T11:58:19.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00021.html - https://github.com/zhutougg/c3p0/commit/2eb0ea97f745740b18dd45e4a909112d4685f87b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFIVX6HOVNLAM7W3SUAMHYRNLCVQSAWR/ - https://lists.fedoraproject.org/archives/list/pa
e%40lists.fedoraproject.org/message/BFIVX6HOVNLAM7W3SUAMHYRNLCVQSAWR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQ47OFV57Y2DAHMGA5H3JOL4WHRWRFN4/
CVE ID: CVE-2018-20434 State: PUBLISHED Published: 2019-04-24T20:05:43 Last Updated: 2024-08-05T11:58:19.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/mhaskar/516df57aafd8c6e3a1d70765075d372d - https://drive.google.com/file/d/1LcGmOY8x-TG-wnNr-c
- https://gist.github.com/mhaskar/516df57aafd8c6e3a1d70765075d372d - https://drive.google.com/file/d/1LcGmOY8x-TG-wnNr-cM_f854kxk0etva/view?usp=sharing - https://shells.systems/librenms-v1-46-remote-code-execution-cve-2018-20434/ - http://packetstormsecurity.com/files/153188/LibreNMS-addhost-Command-Injection.html - http://packetstormsecurity.com/files/153448/LibreNMS-1.46-addhost-Remote-Code-Execution.html
CVE ID: CVE-2018-20436 State: PUBLISHED Published: 2018-12-24T20:00:00 Last Updated: 2024-08-05T11:58:19.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests for URLs typed while composing a chat message, before that chat message is sent. There are also GET requests to other URLs on the same web server. This also affects one or more other Telegram products, such as Telegram Web-version 0.7.0. In addition, it can be interpreted as an SSRF issue. NOTE: a third party has reported that potentially unwanted behavior is caused by misconfiguration of the "Secret chats
NOTE: a third party has reported that potentially unwanted behavior is caused by misconfiguration of the "Secret chats > Preview links" setting Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/abusando-de-telegram-para-conseguir-una.html - https://misteralfa-hack.blogspot.com/2018/12/telegram-siempre-in-middle.html
CVE ID: CVE-2018-20437 State: PUBLISHED Published: 2018-12-25T15:00:00 Last Updated: 2024-08-05T11:58:19.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the fileDownload function in the CommonController class in FEBS-Shiro before 2018-11-05. An attacker can download a file via a request of the form /common/download?filename=1.jsp&delete=false. NOTE: the software maintainer disputes the significance of this report because the product uses a JAR archive for deployment, and this contains application.yml with configuration data Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wuyouzhuguli/FEBS-
nal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wuyouzhuguli/FEBS-Shiro/commit/a9706b1b3c96bacece24886429b4423c3a467acd - https://github.com/wuyouzhuguli/FEBS-Shiro/commit/9a753215b0969a5d5b5bfe8c68585339fee96260 - https://github.com/wuyouzhuguli/FEBS-Shiro/issues/40
CVE ID: CVE-2018-20438 State: PUBLISHED Published: 2018-12-25T15:00:00Z Last Updated: 2024-09-16T23:51:07.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE ID: CVE-2018-20439 State: PUBLISHED Published: 2018-12-25T15:00:00Z Last Updated: 2024-09-17T02:46:33.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE ID: CVE-2018-20440 State: PUBLISHED Published: 2018-12-25T15:00:00Z Last Updated: 2024-09-17T00:36:16.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE ID: CVE-2018-20441 State: PUBLISHED Published: 2018-12-25T15:00:00Z Last Updated: 2024-09-17T04:29:36.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE ID: CVE-2018-20442 State: PUBLISHED Published: 2018-12-25T15:00:00Z Last Updated: 2024-09-16T20:41:41.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE ID: CVE-2018-20443 State: PUBLISHED Published: 2018-12-25T15:00:00Z Last Updated: 2024-09-16T23:15:44.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE ID: CVE-2018-20444 State: PUBLISHED Published: 2018-12-25T15:00:00Z Last Updated: 2024-09-16T21:56:54.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE ID: CVE-2018-20445 State: PUBLISHED Published: 2018-12-25T15:00:00Z Last Updated: 2024-09-16T23:30:49.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32 and iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/d-link-passwords-wireless-via-snmp.html
CVE ID: CVE-2018-20448 State: PUBLISHED Published: 2018-12-25T16:00:00 Last Updated: 2024-08-05T11:58:19.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/philippe/FrogCMS/issues/20 - https://www.exploit-db.com/exploits/46067/
CVE ID: CVE-2018-20449 State: PUBLISHED Published: 2019-04-04T15:25:30 Last Updated: 2024-08-05T11:58:19.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file. Additional Analyst Notes: - CVE Program Container: References: - https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92 - https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03808.html - https://security.netapp.com/advisory/ntap-20190502-0002/
CVE ID: CVE-2018-20450 State: PUBLISHED Published: 2018-12-25T17:00:00 Last Updated: 2024-08-05T11:58:19.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2017-2897. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/evanmiller/libxls/issues/34 - https://security.gentoo.org/glsa/202003-64
CVE ID: CVE-2018-20451 State: PUBLISHED Published: 2018-12-25T17:00:00Z Last Updated: 2024-09-16T22:20:42.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uvoteam/libdoc/issues/2
CVE ID: CVE-2018-20452 State: PUBLISHED Published: 2018-12-25T17:00:00 Last Updated: 2024-08-05T11:58:19.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, because of inconsistent memory management (new versus free) in ole2_read_header in ole.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/evanmiller/libxls/issues/35 - https://security.gentoo.org/glsa/202003-64
CVE ID: CVE-2018-20453 State: PUBLISHED Published: 2018-12-25T17:00:00Z Last Updated: 2024-09-16T19:56:26.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uvoteam/libdoc/issues/1
CVE ID: CVE-2018-20454 State: PUBLISHED Published: 2018-12-25T17:00:00Z Last Updated: 2024-09-16T22:21:04.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resume_list has XSS via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/coolboy0816/audit/issues/1
CVE ID: CVE-2018-20455 State: PUBLISHED Published: 2018-12-25T19:00:00Z Last Updated: 2024-09-16T20:03:48.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/commit/9b46d38dd3c4de6048a488b655c7319f845af185 - https://github.com/radare/radare2/issues/12373