Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
re 1.0.1.26, R6900P before 1.2.0.22, R7000 before 1.0.9.6, R7000P before 1.2.0.22, R7100LG before 1.0.0.40, R7300DST before 1.0.0.54, R7500 before 1.0.0.110, R7500v2 before 1.0.3.26, R7800 before 1.0.2.44, R7900 before 1.0.1.26, R8000 before 1.0.3.48, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.3.10, WN2000RPTv3 before 1.0.1.26, WN2500RPv2 before 1.0.1.46, WN3000RPv3 before 1.0.2.66, WN3100RPv2 before 1.0.0.56, WNDR3400v3 before 1.0.1.14, WNDR3700v4 before 1.0.2.96, WNDR3700v5 before 1.1.0.54, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.42, WNR2000v5 before 1.0.0.64, WNR2020 before 1.1.0.42, and WNR2050 before
00v3 before 1.0.0.48, WNR1000v4 before 1.1.0.42, WNR2000v5 before 1.0.0.64, WNR2020 before 1.1.0.42, and WNR2050 before 1.1.0.42. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000055103/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Gateways-and-Extenders-PSV-2016-0102
CVE ID: CVE-2018-21232 State: PUBLISHED Published: 2020-04-29T13:36:31 Last Updated: 2024-08-05T12:26:39.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/skvadrik/re2c/issues/219 - https://www.openwall.com/lists/oss-security/2020/04/27/2 - http://www.openwall.com/lists/oss-security/2020/05/14/4
CVE ID: CVE-2018-21233 State: PUBLISHED Published: 2020-05-04T14:12:19 Last Updated: 2024-08-05T12:26:39.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decode_bmp_op.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-001.md - https://github.com/tensorflow/tensorflow/commit/49f73c55d56edffebde4bca4a407ad69c1cae433
CVE ID: CVE-2018-21234 State: PUBLISHED Published: 2020-05-21T22:15:31 Last Updated: 2024-08-05T12:26:39.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oblac/jodd/issues/628 - https://github.com/oblac/jodd/compare/v5.0.3...v5.0.4 - https://github.com/oblac/jodd/commit/9bffc3913aeb8472c11bb543243004b4b4376f16 - https://lists.apache.org/thread.html/rc23200043872384e0fc48a4a4502f4c6b4b5ddc79ba4076414150d59%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/rf458683390d6650b26a2c
4c6b4b5ddc79ba4076414150d59%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/rf458683390d6650b26a2c8ba8ad396e038e520ad1cc3f3f1e20514d9%40%3Cdev.hive.apache.org%3E - https://lists.apache.org/thread.html/r965503b27d67a2d934e34fc1d088c9547d51d927c43b8b9bd9b7e695%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/r0bacc701ab7105500a0ab2769270d18f332cb379e6a62ec7553f3327%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/r157d01c96a2c10e7ceb3e005f42c52cfe87b11dd018935e1c4277433%40%3Cgitbox.hive.apache.org%3E - https://lists.apache.org/thread.html/r729bc1e0f367fe8a857ac8a14641dba284ac4cf5131edf483022cf59%40%3Cissues.hive.apache.org%3E - ht
sts.apache.org/thread.html/r729bc1e0f367fe8a857ac8a14641dba284ac4cf5131edf483022cf59%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/rdce006b282e56c5cc73cdf452c51c5097154d0503396d62f48abbeae%40%3Cgitbox.hive.apache.org%3E - https://lists.apache.org/thread.html/rdbb99b43334b59d3d3478d360c87e3235ba22edb1de7d39019194347%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/rc85b650b4ad2c77d7c39c69824488e40dce6d0ebbb4204777d094375%40%3Cgitbox.hive.apache.org%3E - https://lists.apache.org/thread.html/rd575d9877424a2d8776f5c2ff33bf3dc3382cd83f031d483f29c11ab%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/r317aec95c436848233047af7ecb3ce04
f031d483f29c11ab%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/r317aec95c436848233047af7ecb3ce04ce446eb6031f981aef50df0d%40%3Cdev.drill.apache.org%3E
CVE ID: CVE-2018-21235 State: PUBLISHED Published: 2020-06-04T16:41:43 Last Updated: 2024-08-05T12:26:39.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21236 State: PUBLISHED Published: 2020-06-04T16:41:08 Last Updated: 2024-08-05T12:26:39.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21237 State: PUBLISHED Published: 2020-06-04T16:33:11 Last Updated: 2024-08-05T12:26:39.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21238 State: PUBLISHED Published: 2020-06-04T16:32:09 Last Updated: 2024-08-05T12:26:39.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21239 State: PUBLISHED Published: 2020-06-04T16:31:05 Last Updated: 2024-08-05T12:26:39.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21240 State: PUBLISHED Published: 2020-06-04T16:30:30 Last Updated: 2024-08-05T12:26:39.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21241 State: PUBLISHED Published: 2020-06-04T16:29:20 Last Updated: 2024-08-05T12:26:39.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21242 State: PUBLISHED Published: 2020-06-04T16:23:56 Last Updated: 2024-08-05T12:26:39.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21243 State: PUBLISHED Published: 2020-06-04T16:22:40 Last Updated: 2024-08-05T12:26:39.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21244 State: PUBLISHED Published: 2020-06-04T16:17:01 Last Updated: 2024-08-05T12:26:39.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-21245 State: PUBLISHED Published: 2020-06-15T16:50:38 Last Updated: 2024-08-05T12:26:39.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711. Additional Analyst Notes: - CVE Program Container: References: - https://admin.hostpoint.ch/pipermail/pound_apsis.ch/2018-May/000054.html - https://bugs.gentoo.org/714084
CVE ID: CVE-2018-21246 State: PUBLISHED Published: 2020-06-15T16:50:25 Last Updated: 2024-08-05T12:26:39.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caddyserver/caddy/releases/tag/v0.10.13 - https://bugs.gentoo.org/715214
CVE ID: CVE-2018-21247 State: PUBLISHED Published: 2020-06-17T15:10:51 Last Updated: 2024-08-05T12:26:39.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/issues/253 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ/ - https://l
oject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2018-21248 State: PUBLISHED Published: 2020-06-19T16:47:04 Last Updated: 2024-08-05T12:26:39.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of superfluous authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21249 State: PUBLISHED Published: 2020-06-19T16:47:49 Last Updated: 2024-08-05T12:26:39.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.3.0. It mishandles timing. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21250 State: PUBLISHED Published: 2020-06-19T16:51:17 Last Updated: 2024-08-05T12:26:39.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service (memory consumption) via crafted image dimensions. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21251 State: PUBLISHED Published: 2020-06-19T16:49:18 Last Updated: 2024-08-05T12:26:39.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be bypassed if the channel name were not the same in the params and the body. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21252 State: PUBLISHED Published: 2020-06-19T17:44:09 Last Updated: 2024-08-05T12:26:39.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers could use multiple e-mail addresses to bypass a domain-based policy for signups. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21253 State: PUBLISHED Published: 2020-06-19T16:45:02 Last Updated: 2024-08-05T12:26:39.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. An attacker could use the invite_people slash command to invite a non-permitted user. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21254 State: PUBLISHED Published: 2020-06-19T16:49:54 Last Updated: 2024-08-05T12:26:39.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control (for direct-message channel creation) via the Message slash command. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21255 State: PUBLISHED Published: 2020-06-19T16:49:55 Last Updated: 2024-08-05T12:26:39.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the Channel PATCH API to modify that channel. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21256 State: PUBLISHED Published: 2020-06-19T17:44:07 Last Updated: 2024-08-05T12:26:39.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for group-message channel creation) via the Group message slash command. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21257 State: PUBLISHED Published: 2020-06-19T16:51:47 Last Updated: 2024-08-05T12:26:39.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for setting a channel header) via the Channel header slash command API. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21258 State: PUBLISHED Published: 2020-06-19T16:45:05 Last Updated: 2024-08-05T12:26:39.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of service via the invite_people slash command. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21259 State: PUBLISHED Published: 2020-06-19T16:47:10 Last Updated: 2024-08-05T12:26:39.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers to cause a denial of service (application hang) via a malformed link in a channel. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21260 State: PUBLISHED Published: 2020-06-19T16:49:45 Last Updated: 2024-08-05T12:26:39.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21261 State: PUBLISHED Published: 2020-06-19T16:51:44 Last Updated: 2024-08-05T12:26:39.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team invite_id, which leads to unintended excessive invitation privileges. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21262 State: PUBLISHED Published: 2020-06-19T16:51:43 Last Updated: 2024-08-05T12:26:39.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service (application crash) via invalid LaTeX text. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21263 State: PUBLISHED Published: 2020-06-19T16:45:07 Last Updated: 2024-08-05T12:26:39.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. An attacker could authenticate to a different user's account via a crafted SAML response. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21264 State: PUBLISHED Published: 2020-06-19T17:44:05 Last Updated: 2024-08-05T12:26:39.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. It did not enforce the expiration date of a SAML response. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21265 State: PUBLISHED Published: 2020-06-19T16:51:42 Last Updated: 2024-08-05T12:26:39.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler (e.g., video, audio, and notifications). Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2018-21266 State: REJECTED Published: 2020-10-22T21:29:19 Last Updated: 2020-10-22T21:29:19 Description: No description available.
CVE ID: CVE-2018-21267 State: REJECTED Published: 2020-10-22T21:30:17 Last Updated: 2020-10-22T21:30:17 Description: No description available.
CVE ID: CVE-2018-21268 State: PUBLISHED Published: 2020-06-25T16:56:53 Last Updated: 2024-08-05T12:26:39.592Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/posts/op-innovate_shell-command-injection-through-traceroute-activity-6
ontainer: References: - https://www.linkedin.com/posts/op-innovate_shell-command-injection-through-traceroute-activity-6678956453086191616-Rcpy - https://www.op-c.net/2020/06/17/shell-command-injection-through-traceroute-npm-package/ - https://medium.com/%40shay_62828/shell-command-injection-through-traceroute-npm-package-a4cf7b6553e3 - https://github.com/jaw187/node-traceroute/tags - https://www.npmjs.com/package/traceroute - https://www.npmjs.com/advisories/1465 - https://snyk.io/vuln/npm:traceroute:20160311 - https://github.com/jaw187/node-traceroute/commit/b99ee024a01a40d3d20a92ad3769cc78a3f6386f
CVE ID: CVE-2018-21269 State: PUBLISHED Published: 2020-10-27T03:42:32 Last Updated: 2024-08-05T12:26:39.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenRC/openrc/issues/201
CVE ID: CVE-2018-21270 State: PUBLISHED Published: 2020-12-03T21:00:45 Last Updated: 2024-08-05T12:26:39.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x). Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/321670 - https://www.npmjs.com/advisories/664 - https://github.com/mhart/StringStream/issues/7
CVE ID: CVE-2018-25001 State: PUBLISHED Published: 2020-12-31T08:33:31 Last Updated: 2024-08-05T12:26:39.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0020.html
CVE ID: CVE-2018-25002 State: PUBLISHED Published: 2020-12-31T23:27:52 Last Updated: 2024-08-05T12:26:39.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/sa-contrib-2018-024 - https://www.drupal.org/project/kcfinder/issues/1768720 - https://www.drupal.org/project/kcfinder/issues/1768718
CVE ID: CVE-2018-25004 State: PUBLISHED Published: 2021-03-01T16:15:14.484681Z Last Updated: 2024-11-19T15:42:57.505Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-20 Description: A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.mongodb.org/browse/SERVER-38275
CVE ID: CVE-2018-25007 State: PUBLISHED Published: 2021-04-23T16:05:40.338203Z Last Updated: 2024-09-16T18:18:49.023Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Vaadin Products: Vaadin, flow-server Problem Types: CWE-754 Description: Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message. Additional Analyst Notes: - CVE Program Container: References: - https://vaadin.com/security/cve-2018-25007 - https://github.com/vaadin/flow/pull/4774
CVE ID: CVE-2018-25008 State: PUBLISHED Published: 2021-04-14T06:10:04 Last Updated: 2024-08-05T12:26:39.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchronization issue can be lead to memory safety issues through race conditions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/issues/51780 - https://github.com/rust-lang/rust/pull/52031