Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10403 State: PUBLISHED Published: 2018-06-13T22:00:00 Last Updated: 2024-08-05T07:39:07.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in F-Secure XFENCE and Little Flocker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. Additional Analyst Notes: - CVE Program Container: References: - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
CVE ID: CVE-2018-10404 State: PUBLISHED Published: 2018-06-13T22:00:00 Last Updated: 2024-08-05T07:39:07.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. Additional Analyst Notes: - CVE Program Container: References: - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-c
ogram Container: References: - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
CVE ID: CVE-2018-10405 State: PUBLISHED Published: 2018-06-13T22:00:00 Last Updated: 2024-08-05T07:39:08.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. Additional Analyst Notes: - CVE Program Container: References: - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
CVE ID: CVE-2018-10406 State: PUBLISHED Published: 2018-06-13T22:00:00 Last Updated: 2024-08-05T07:39:07.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. Additional Analyst Notes: - CVE Program Container: References: - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
CVE ID: CVE-2018-10407 State: PUBLISHED Published: 2018-06-13T22:00:00 Last Updated: 2024-08-05T07:39:07.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. Additional Analyst Notes: - CVE Program Container: References: - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
CVE ID: CVE-2018-10408 State: PUBLISHED Published: 2018-06-13T22:00:00 Last Updated: 2024-08-05T07:39:07.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in VirusTotal. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. Additional Analyst Notes: - CVE Program Container: References: - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
CVE ID: CVE-2018-10422 State: PUBLISHED Published: 2018-04-26T05:00:00Z Last Updated: 2024-09-16T18:34:47.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Neeke/HongCMS/issues/2
CVE ID: CVE-2018-10423 State: PUBLISHED Published: 2018-04-26T05:00:00Z Last Updated: 2024-09-16T19:40:44.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/18
CVE ID: CVE-2018-10424 State: PUBLISHED Published: 2018-04-26T05:00:00Z Last Updated: 2024-09-16T17:33:40.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/18
CVE ID: CVE-2018-10425 State: PUBLISHED Published: 2018-04-26T07:00:00 Last Updated: 2024-08-05T07:39:07.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because SetParent is not properly considered. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rebol0x6c/2345poc
CVE ID: CVE-2018-10428 State: PUBLISHED Published: 2018-05-23T20:00:00 Last Updated: 2024-08-05T07:39:07.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/542025/100/0/threaded - http://packetstormsecurity.com/files/147726/ILIAS-5.3.2-5.2.14-5.1.25-Cross-Site-Scripting.html - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-007.txt - https://www.ilias.de/docu/ilias.php?re
ps://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-007.txt - https://www.ilias.de/docu/ilias.php?ref_id=1719&from_page=116805&obj_id=116799&cmd=layout&cmdClass=illmpresentationgui&cmdNode=wc&baseClass=ilLMPresentationGUI - https://www.ilias.de/docu/ilias.php?ref_id=1719&obj_id=116792&from_page=116805&cmd=layout&cmdClass=illmpresentationgui&cmdNode=wc&baseClass=ilLMPresentationGUI - https://www.ilias.de/docu/ilias.php?ref_id=1719&from_page=116793&obj_id=116793&cmd=layout&cmdClass=illmpresentationgui&cmdNode=wc&baseClass=ilLMPresentationGUI
CVE ID: CVE-2018-10429 State: PUBLISHED Published: 2018-04-26T17:00:00Z Last Updated: 2024-09-17T02:32:25.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CosmoCMS/Cosmo/issues/405
CVE ID: CVE-2018-10430 State: PUBLISHED Published: 2018-04-26T17:00:00Z Last Updated: 2024-09-17T00:46:11.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting->site setting" of admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chekun/DiliCMS/issues/57
CVE ID: CVE-2018-10431 State: PUBLISHED Published: 2018-04-26T17:00:00 Last Updated: 2024-08-05T07:39:07.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/dlink/dlink_dir615_rce.md
CVE ID: CVE-2018-10432 State: PUBLISHED Published: 2020-09-25T03:24:20 Last Updated: 2024-08-05T07:39:07.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP). Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/whats_new.htm - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2018-10465 State: PUBLISHED Published: 2020-01-07T18:58:45 Last Updated: 2024-08-05T07:39:07.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jamf Pro had full access to endpoints in the Universal API (UAPI), regardless of account privileges or privilege sets. An authenticated Jamf Pro account without required privileges could be used to perform CRUD actions (GET, POST, PUT, DELETE) on UAPI endpoints, which could result in unauthorized information disclosure, compromised data integrity, and data loss. For a full listing of available UAPI endpoints an
zed information disclosure, compromised data integrity, and data loss. For a full listing of available UAPI endpoints and associated CRUD actions you can navigate to /uapi/doc in your instance of Jamf Pro. Additional Analyst Notes: - CVE Program Container: References: - https://docs.jamf.com/10.3.0/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html
CVE ID: CVE-2018-10466 State: PUBLISHED Published: 2018-05-29T20:00:00 Last Updated: 2024-08-05T07:39:07.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/adaudit-plus-release-notes.html - https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-10466
CVE ID: CVE-2018-10468 State: PUBLISHED Published: 2018-04-28T13:00:00 Last Updated: 2024-08-05T07:39:07.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because certain computations involving _value are incorrect, as exploited in the wild starting in December 2017, aka the "transferFlaw" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/04/28/transferFlaw/ - https://medium.com/%40jonghyk.song/uselessethereumtoken-uet-er
nces: - https://peckshield.com/2018/04/28/transferFlaw/ - https://medium.com/%40jonghyk.song/uselessethereumtoken-uet-erc20-token-allows-attackers-to-steal-all-victims-balances-543d42ac808e
CVE ID: CVE-2018-10469 State: PUBLISHED Published: 2018-04-27T04:00:00Z Last Updated: 2024-09-16T21:04:25.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b3log/symphony/issues/620
CVE ID: CVE-2018-10470 State: PUBLISHED Published: 2018-06-12T17:00:00Z Last Updated: 2024-09-16T21:03:03.661Z Vendors: Objective Development Software GmbH Products: Little Snitch Problem Types: CWE-347 Description: Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and therefore do not validate all architectures stored in a fat binary. An attacker can maliciously craft a fat binary containing multiple architectures that may cause a situation where Little Snitch treats the running process as having no code signature at all while erroneously indicating that the binary on disk does have a valid code signature
as having no code signature at all while erroneously indicating that the binary on disk does have a valid code signature. This could lead to users being confused about whether or not the code signature is valid. Additional Analyst Notes: - CVE Program Container: References: - https://obdev.at/cve/2018-10470-8FRWkW4oH8.html - https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
CVE ID: CVE-2018-10471 State: PUBLISHED Published: 2018-04-27T15:00:00 Last Updated: 2024-08-05T07:39:07.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104003 - https://security.gentoo.org/glsa/201810-06 - https://xenbits.xen.org/xsa/advisory-259.html - https://www.debian.org/security/2018/dsa-4201 - https://lists.debian.org/debian-lts-announce/201
xsa/advisory-259.html - https://www.debian.org/security/2018/dsa-4201 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
CVE ID: CVE-2018-10472 State: PUBLISHED Published: 2018-04-27T15:00:00 Last Updated: 2024-08-05T07:39:07.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifying the target file as the backing file of a snapshot. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html - https://xenbits.xen.org/xsa/advisory-258.html - http://www.securityfocus.com/bid/104002 - https://ww
/10/msg00021.html - https://xenbits.xen.org/xsa/advisory-258.html - http://www.securityfocus.com/bid/104002 - https://www.debian.org/security/2018/dsa-4201
CVE ID: CVE-2018-10473 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:07.412Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D CLOD Base Mesh Continuation structures. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverag
ation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5392. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-383
CVE ID: CVE-2018-10474 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:07.702Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D Shading objects. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to ex
data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5393. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-384 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-10475 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:07.411Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D Light Node structures. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in
user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5394. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-385 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-10476 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:07.966Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D Model Node structures. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in
user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5395. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-386
CVE ID: CVE-2018-10477 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:08.129Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D Chain Index objects. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability t
ied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5396. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-387
CVE ID: CVE-2018-10478 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:07.820Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D Texture Coord Dimensions objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage
idation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5397. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-388 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-10479 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:07.572Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D Key Frame structures. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this
ser-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5399. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-389
CVE ID: CVE-2018-10480 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:08.188Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the U3D Node Name buffer. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in con
user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5401. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-390 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-10481 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:39:07.682Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D Texture Resource structures. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can lever
ion of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5408. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-391