Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10187 State: PUBLISHED Published: 2018-04-17T20:00:00 Last Updated: 2024-08-05T07:32:01.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from CVE-2018-8809, which was patched earlier. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/9913
CVE ID: CVE-2018-10188 State: PUBLISHED Published: 2018-04-19T14:00:00 Last Updated: 2024-08-05T07:32:01.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103936 - http://www.securitytracker.com/id/1040752 - https://www.phpmyadmin.net/security/PMASA-2018-2/ - https://www.exploit-db.com/exploits/44496/
CVE ID: CVE-2018-10189 State: PUBLISHED Published: 2018-04-17T20:00:00Z Last Updated: 2024-09-17T00:31:14.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mautic/mautic/
ve profiling enabled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mautic/mautic/releases/tag/2.13.0
CVE ID: CVE-2018-10190 State: PUBLISHED Published: 2018-04-17T20:00:00Z Last Updated: 2024-09-16T18:08:42.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in London Trust Media Private Internet Access (PIA) VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help" options available from the system tray context menu spawn an elevated instance of the user's default web browser. An attacker could exploit this vulnerability by selecting "Run as Administrator" from the context menu of an executable f
n attacker could exploit this vulnerability by selecting "Run as Administrator" from the context menu of an executable file within the file browser of the spawned default web browser. This may allow the attacker to execute privileged commands on the targeted system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-019.md
CVE ID: CVE-2018-10191 State: PUBLISHED Published: 2018-04-17T21:00:00 Last Updated: 2024-08-05T07:32:01.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. An attacker that can cause Ruby code to be run can use this to possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mruby/mruby/issues/3995 - https://github.com/mruby/mruby/commit/1905091634a6a2925c911484434448e568330626 - https://lists.debian.org/debian-lts-announce/2
/github.com/mruby/mruby/commit/1905091634a6a2925c911484434448e568330626 - https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
CVE ID: CVE-2018-10192 State: PUBLISHED Published: 2018-04-17T21:00:00Z Last Updated: 2024-09-16T20:47:14.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The `com.ipvanish.osx.vpnhelper` LaunchDaemon implements an insecure XPC service that could allow an attacker to execute arbitrary code as the root user. IPVanish uses a third-party library for converting `xpc_object_t` types in to `NSObject` types for sending XPC messages. When IPVanish establishes a new connection, the following XPC message is sent to the `com.ipvanish.osx.vpnhelper` LaunchDaemon. Because the XPC service itself does not valid
wing XPC message is sent to the `com.ipvanish.osx.vpnhelper` LaunchDaemon. Because the XPC service itself does not validate an incoming connection, any application installed on the operating system can send it XPC messages. In the case of the "connect" message, an attacker could manipulate the `OpenVPNPath` to point at a malicious binary on the system. The `com.ipvanish.osx.vpnhelper` would receive the VPNHelperConnect command, and then execute the malicious binary as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-020.md
CVE ID: CVE-2018-10193 State: PUBLISHED Published: 2018-04-18T00:00:00 Last Updated: 2024-08-05T07:32:01.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/LastPassHelp/status/955478245650071552 - https://forums.lastpass.com/viewtopic.php?f=12&t=286955 - https://www.youtube.com/watch?v=wTcYWZwq3TE
CVE ID: CVE-2018-10194 State: PUBLISHED Published: 2018-04-18T21:00:00 Last Updated: 2024-08-05T07:32:01.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2918 - https://security.gentoo.org/glsa/201811-12 - http://git.ghostscript.com/?p=ghostpdl.g
redhat.com/errata/RHSA-2018:2918 - https://security.gentoo.org/glsa/201811-12 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=39b1e54b2968620723bf32e96764c88797714879 - https://lists.debian.org/debian-lts-announce/2018/04/msg00028.html - https://usn.ubuntu.com/3636-1/ - https://bugs.ghostscript.com/show_bug.cgi?id=699255 - http://www.securitytracker.com/id/1040729
CVE ID: CVE-2018-10195 State: PUBLISHED Published: 2021-06-02T13:54:18 Last Updated: 2024-08-05T07:32:01.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around. Additional Analyst Notes: - CVE Program Container: References: - http://www.ohse.de/uwe/software/lrzsz.html - https://lists.suse.com/pipermail/sle-security-updates/2018-April/003955.html?_ga=2.81625751.1026327980.1622040648-1950393542.1547130931 - https://lists.suse.com/pipermail/sle-security-updates/2018-April/003956.html?_ga=2.81625751.1026327980.1622040648-1
31 - https://lists.suse.com/pipermail/sle-security-updates/2018-April/003956.html?_ga=2.81625751.1026327980.1622040648-1950393542.1547130931 - https://bugzilla.redhat.com/show_bug.cgi?id=1572058 - https://lists.debian.org/debian-lts-announce/2022/01/msg00027.html
CVE ID: CVE-2018-10196 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-05T07:32:01.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3731-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TWUEEJPMS5LAROYJYY6FREOTI6VPN3M4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
/message/TWUEEJPMS5LAROYJYY6FREOTI6VPN3M4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VR2CT3LD52GWAQUZAOSEXSYE3O7HGN/ - https://gitlab.com/graphviz/graphviz/issues/1367 - https://bugzilla.redhat.com/show_bug.cgi?id=1579254 - https://lists.debian.org/debian-lts-announce/2021/05/msg00014.html
CVE ID: CVE-2018-10197 State: PUBLISHED Published: 2018-07-11T16:00:00 Last Updated: 2024-08-05T07:32:01.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the "userdata" table from the "eloam" database. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclo
om the "eloam" database. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jul/29
CVE ID: CVE-2018-10198 State: PUBLISHED Published: 2018-06-06T20:00:00 Last Updated: 2024-08-05T07:32:01.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2018-01-security-update-for-otrs-framework/
CVE ID: CVE-2018-10199 State: PUBLISHED Published: 2018-04-18T15:00:00Z Last Updated: 2024-09-16T21:58:11.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: In versions of mruby up to and including 1.4.0, a use-after-free vulnerability exists in src/io.c::File#initilialize_copy(). An attacker that can cause Ruby code to be run can possibly use this to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mruby/mruby/commit/b51b21fc63c9805862322551387d9036f2b63433 - https://github.com/mruby/mruby/issues/4001
CVE ID: CVE-2018-10201 State: PUBLISHED Published: 2018-04-20T08:00:00 Last Updated: 2024-08-05T07:32:01.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible to read arbitrary files outside the root directory of the web server. This vulnerability could be exploited remotely by a crafted URL without credentials, with .../ or ...\ or ..../ or ....\ as a directory-traversal pattern to TCP port 8667. Additional Analyst Notes: - CVE Program Container: References: - https://www.kwell.net/kwell/index.php?option=com_newsfeeds&view=newsfeed&id=15&Itemid=173&lang=es - https
References: - https://www.kwell.net/kwell/index.php?option=com_newsfeeds&view=newsfeed&id=15&Itemid=173&lang=es - https://www.exploit-db.com/exploits/44497/ - http://www.kwell.net/kwell_blog/?p=5199 - https://support.ncomputing.com/portal/kb/articles/ncomputing-health-monitor-server-vulnerability-patch
CVE ID: CVE-2018-10204 State: PUBLISHED Published: 2018-04-18T21:00:00Z Last Updated: 2024-09-17T03:17:59.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This file allows "Write" permissions to users in the "Everyone" group. An authenticated attacker may modify this file to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in
specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-021.md
CVE ID: CVE-2018-10205 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T07:32:01.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container_setup_modules and hyper_rescan_scsi functions in container.c, related to runV 1.0.0 for Docker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hyperhq/hyperstart/pull/350
CVE ID: CVE-2018-10206 State: PUBLISHED Published: 2018-04-25T18:00:00.000Z Last Updated: 2025-05-30T16:00:39.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10206/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10206
CVE ID: CVE-2018-10207 State: PUBLISHED Published: 2018-04-25T18:00:00.000Z Last Updated: 2025-05-30T16:00:57.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a document in SWF format. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10207/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10207
CVE ID: CVE-2018-10208 State: PUBLISHED Published: 2018-04-25T18:00:00.000Z Last Updated: 2025-05-30T16:00:59.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous reflected XSS on the error page via a /share/error?message= URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10208/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10208
CVE ID: CVE-2018-10209 State: PUBLISHED Published: 2018-04-25T18:00:00.000Z Last Updated: 2025-05-30T16:01:00.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder name. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10209/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10209
CVE ID: CVE-2018-10210 State: PUBLISHED Published: 2018-04-25T18:00:00.000Z Last Updated: 2025-05-30T16:01:03.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is possible through the password-reset feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10210/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10210
CVE ID: CVE-2018-10211 State: PUBLISHED Published: 2018-04-25T18:00:00.000Z Last Updated: 2025-05-30T16:01:05.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultize_session_id" value in a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10211/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10211
CVE ID: CVE-2018-10212 State: PUBLISHED Published: 2018-04-25T18:00:00.000Z Last Updated: 2025-05-30T16:01:14.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10212/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10212
CVE ID: CVE-2018-10213 State: PUBLISHED Published: 2018-04-25T18:00:00.000Z Last Updated: 2025-05-30T16:01:09.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is XSS in invitation mail received from a different user, who can modify the HTML in that mail before sending it. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-10213/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-10213
CVE ID: CVE-2018-10219 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T07:32:01.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: baijiacms V3 has physical path leakage via an index.php?mod=mobile&name=member&do=index request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/L3tter/bugs/blob/master/baijiacmsV3_bug
CVE ID: CVE-2018-10220 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T07:32:01.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. NOTE: the vendor indicates that this is intentional behavior because the product is a web application honeypot, and modules/handlers/emulators/rfi.py supports Remote File Inclusion emulation Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mushorg/glastopf/issues/286
CVE ID: CVE-2018-10221 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T07:32:01.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can steal the administrator cookies via the tag[tag] parameter to the index.php?m=tags&f=index&v=add&&_su=wuzhicms URI. After a website editor (whose privilege is lower than the administrator) logs in, he can add a new TAGS with the XSS payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/129
CVE ID: CVE-2018-10222 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T07:32:01.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=article_category&do=save&frame=iPHP. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/21
CVE ID: CVE-2018-10223 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T07:32:01.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/admin_manage/add.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.8sec.cc/archives/596 - https://github.com/yzmcms/yzmcms/issues/1
CVE ID: CVE-2018-10224 State: PUBLISHED Published: 2018-04-19T08:00:00 Last Updated: 2024-08-05T07:32:01.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/2 - http://www.8sec.cc/archives/601
CVE ID: CVE-2018-10225 State: PUBLISHED Published: 2018-04-19T08:00:00Z Last Updated: 2024-09-17T02:16:26.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: thinkphp 3.1.3 has SQL Injection via the index.php s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.blcat.cn/post-39.html
CVE ID: CVE-2018-10227 State: PUBLISHED Published: 2018-04-19T08:00:00Z Last Updated: 2024-09-16T19:00:44.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/15
CVE ID: CVE-2018-10228 State: PUBLISHED Published: 2021-12-14T18:31:22 Last Updated: 2024-08-05T07:32:01.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in /application/controller/admin/theme.php in LimeSurvey 3.6.2+180406 allows remote attackers to inject arbitrary web script or HTML via the changes_cp parameter to the index.php/admin/themes/sa/templatesavechanges URI. Additional Analyst Notes: - CVE Program Container: References: - http://limesurvey.com
CVE ID: CVE-2018-10229 State: PUBLISHED Published: 2018-05-04T20:00:00 Last Updated: 2024-08-05T07:32:01.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104084 - https://www.vusec.net/wp-content/uploads/2018/05/glitch.pdf - https://www.kb.cert.org/vuls/id/283803
CVE ID: CVE-2018-10230 State: PUBLISHED Published: 2018-04-19T16:00:00 Last Updated: 2024-08-05T07:32:01.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455. Additional Analyst Notes: - CVE Program Container: References: - https://www.synacktiv.com/ressources/zend_server_9_1_3_xss.pdf - https://www.zend.com/en/products/server/release-notes
CVE ID: CVE-2018-10231 State: PUBLISHED Published: 2018-07-11T17:00:00 Last Updated: 2024-08-05T07:32:01.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://page.topdesk.com/cve-2018-10231-and-cve-2018-10232?hs_preview=slNSCcfI-5931819551
CVE ID: CVE-2018-10232 State: PUBLISHED Published: 2018-07-11T17:00:00 Last Updated: 2024-08-05T07:32:01.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authentication of authenticated users for requests that can obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://page.topdesk.com/cve-2018-10231-and-cve-2018-10232?hs_preview=slNSCcfI-5931819551