Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://security.gentoo.org/glsa/201811-17 - http://www.securityfocus.com/bid/102985 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
CVE ID: CVE-2018-6544 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-15 - https://bugs.ghostscript.com/show_bug.cgi?id=698965 - https://www.debian.org/security/2018/dsa-4152 - http://git.ghostscript.com/?p=mupdf.git%3Bh=26527eef77b3e51c2258c8e40845bfbc015e405d - htt
.org/security/2018/dsa-4152 - http://git.ghostscript.com/?p=mupdf.git%3Bh=26527eef77b3e51c2258c8e40845bfbc015e405d - http://git.ghostscript.com/?p=mupdf.git%3Bh=b03def134988da8c800adac1a38a41a1f09a1d89 - https://bugs.ghostscript.com/show_bug.cgi?id=698830
CVE ID: CVE-2018-6545 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch MoveIt v8.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability, as demonstrated by human.aspx. Attackers can leverage this vulnerability to send malicious messages to other users in order to steal session cookies and launch client-side attacks. Additional Analyst Notes: - CVE Program Container: References: - https://crowdshield.com/blog.php?name=ipswitch-moveit-stored-xss
CVE ID: CVE-2018-6546 State: PUBLISHED Published: 2018-04-13T16:00:00 Last Updated: 2024-08-05T06:10:10.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes code at a user-defined (local or SMB) path as SYSTEM when the execute_installer parameter is used in an HTTP message. This occurs without properly authenticating the user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/securifera/CVE-2018-6546-Exploit/ - https://www.exploit-db.com/exploits/44476/ - https://www.securifera.com/advisories/CVE-2018-
ra/CVE-2018-6546-Exploit/ - https://www.exploit-db.com/exploits/44476/ - https://www.securifera.com/advisories/CVE-2018-6546/
CVE ID: CVE-2018-6547 State: PUBLISHED Published: 2018-04-13T16:00:00 Last Updated: 2024-08-05T06:10:10.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, contains an HTTP message parsing function that takes a user-defined path and writes non-user controlled data as SYSTEM to the file when the extract_files parameter is used. This occurs without properly authenticating the user. Additional Analyst Notes: - CVE Program Container: References: - https://www.securifera.com/advisories/CVE-2018-6547/
CVE ID: CVE-2018-6548 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was initialized once before, its property frame_ would not be changed because of code in vp9parser::Vp9HeaderParser::SetFrame. Its frame_ could be freed while the corresponding pointer would not be updated, leading to a dangling pointer. This is related to the function OutputCluster in webm_info.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/PoCs/blob/master/libwebm%20Vp9HeaderParser%20UAF%
tes: - CVE Program Container: References: - https://github.com/dwfault/PoCs/blob/master/libwebm%20Vp9HeaderParser%20UAF%20by%20PrintVP9Info/libwebm%20Vp9HeaderParser%20UAF%20by%20PrintVP9Info.md - https://bugs.chromium.org/p/webm/issues/detail?id=1493
CVE ID: CVE-2018-6550 State: PUBLISHED Published: 2018-02-02T09:00:00Z Last Updated: 2024-09-16T17:38:26.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/commit/388ab412035474068758df6b07e7e06852f3747b - https://github.com/monstra-cms/monstra/issues/427
CVE ID: CVE-2018-6551 State: PUBLISHED Published: 2018-02-02T14:00:00 Last Updated: 2024-08-05T06:10:10.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=8e448310d74b283c5cd02b9ed7fb997b47bf9b22 - https://sourceware.org/bugzilla/show_bug.cg
g/git/?p=glibc.git%3Ba=commit%3Bh=8e448310d74b283c5cd02b9ed7fb997b47bf9b22 - https://sourceware.org/bugzilla/show_bug.cgi?id=22774 - https://security.netapp.com/advisory/ntap-20190404-0003/
CVE ID: CVE-2018-6552 State: PUBLISHED Published: 2018-05-31T22:00:00Z Last Updated: 2024-09-17T03:07:21.752Z Vendors: n/a Products: Apport Problem Types: Denial of service via resource exhaustion, privilege escalation, and escape from containers Description: Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather tha
oc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28. Additional Analyst Notes: - CVE Program Container: References: - https://usn.
.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-3664-1 - https://usn.ubuntu.com/3664-2/
CVE ID: CVE-2018-6553 State: PUBLISHED Published: 2018-08-10T15:00:00Z Last Updated: 2024-09-16T19:51:16.287Z Vendors: n/a Products: cups Problem Types: Escape from sandbox confinement Description: The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-3713-1 - https://www.debian.o
ional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-3713-1 - https://www.debian.org/security/2018/dsa-4243 - https://lists.debian.org/debian-lts-announce/2018/07/msg00014.html - https://security.gentoo.org/glsa/201908-08
CVE ID: CVE-2018-6554 State: PUBLISHED Published: 2018-09-04T18:00:00Z Last Updated: 2024-09-17T01:41:05.683Z Vendors: Linux Kernel Products: Linux Kernel Problem Types: CWE-400 Description: Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3776-1/ - https://usn.ubuntu.com/3776-2/ - https://usn.ubuntu.com/3777-1/ - https://usn.ubuntu.com/3775-1/ - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.
usn.ubuntu.com/3777-1/ - https://usn.ubuntu.com/3775-1/ - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://www.spinics.net/lists/stable/msg255030.html - https://www.debian.org/security/2018/dsa-4308 - http://www.securityfocus.com/bid/105302 - https://usn.ubuntu.com/3775-2/ - https://usn.ubuntu.com/3777-2/ - https://usn.ubuntu.com/3777-3/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://www.spinics.net/lists/stable/msg255034.html
CVE ID: CVE-2018-6555 State: PUBLISHED Published: 2018-09-04T18:00:00Z Last Updated: 2024-09-16T23:42:04.264Z Vendors: Linux Kernel Products: Linux Kernel Problem Types: CWE-416 Description: The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3776-1/ - https://usn.ubuntu.com/3776-2/ - https://www.spinics.net/lists/stable/msg255035.html - https://usn.ubuntu.com/3777-1/ - ht
tps://usn.ubuntu.com/3776-2/ - https://www.spinics.net/lists/stable/msg255035.html - https://usn.ubuntu.com/3777-1/ - https://usn.ubuntu.com/3775-1/ - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://www.debian.org/security/2018/dsa-4308 - https://usn.ubuntu.com/3775-2/ - http://www.securityfocus.com/bid/105304 - https://usn.ubuntu.com/3777-2/ - https://www.spinics.net/lists/stable/msg255031.html - https://usn.ubuntu.com/3777-3/
CVE ID: CVE-2018-6556 State: PUBLISHED Published: 2018-08-10T15:00:00Z Last Updated: 2024-09-17T03:38:26.856Z Vendors: n/a Products: LXC Problem Types: Incorrect access control Description: lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a (read-only) open of special kernel files (ptmx, proc, sys). Affected releases are LXC: 2.0 versions above and including 2.0.9; 3.0 versions above and including 3.0.0, prior to 3.0.2. Additional Analyst Notes: - CVE
ions above and including 2.0.9; 3.0 versions above and including 3.0.0, prior to 3.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-3730-1 - https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1783591 - https://security.gentoo.org/glsa/201808-02 - https://bugzilla.suse.com/show_bug.cgi?id=988348 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00076.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
CVE ID: CVE-2018-6557 State: PUBLISHED Published: 2018-08-21T16:00:00Z Last Updated: 2024-09-16T18:24:32.413Z Vendors: Ubuntu Products: base-files Problem Types: Insecure Temporary File Description: The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1ubuntu6 incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service, or possibly escalate privileges if kernel symlink restrictions were disabled. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3748-1/ - http://www.securitytracker.com/id/1041530 - http://www.securityfocus.com/bid/105148
CVE ID: CVE-2018-6558 State: PUBLISHED Published: 2018-08-23T20:00:00Z Last Updated: 2024-09-17T02:06:50.219Z Vendors: The fscrypt Project Products: fscrypt Problem Types: n/a Description: The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/fscrypt/issues/77 - https://github.com/google/fscrypt/commit/3022c1603d968c22f147b4a2c49c4637dd1be91b - https://github.com/google/fscrypt/commit
s://github.com/google/fscrypt/commit/3022c1603d968c22f147b4a2c49c4637dd1be91b - https://github.com/google/fscrypt/commit/315f9b042237200174a1fb99427f74027e191d66 - https://launchpad.net/bugs/1787548
CVE ID: CVE-2018-6559 State: PUBLISHED Published: 2018-10-26T17:00:00Z Last Updated: 2024-09-16T19:19:23.303Z Vendors: Canonical Ltd. Products: Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10 Problem Types: CWE-200 Description: The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105752 - https://usn.ubuntu.com/3836-2/ - https://usn.ubuntu.com/3835-1/ - https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.html - ht
836-2/ - https://usn.ubuntu.com/3835-1/ - https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6559.html - https://lists.ubuntu.com/archives/kernel-team/2018-October/096172.html - https://usn.ubuntu.com/3833-1/ - https://usn.ubuntu.com/3832-1/ - https://launchpad.net/bugs/1793458 - https://usn.ubuntu.com/3836-1/
CVE ID: CVE-2018-6560 State: PUBLISHED Published: 2018-02-02T14:00:00 Last Updated: 2024-08-05T06:10:10.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatpak/flatpak/commit/52346bf187b5a7f1c0fe9075b328b7ad6abe78f6 - https://access.redhat.com/errata/RHSA-2018:2766 - https://github.com/flatpak/flatpak/releases/tag/0.10.3 - https://gith
https://access.redhat.com/errata/RHSA-2018:2766 - https://github.com/flatpak/flatpak/releases/tag/0.10.3 - https://github.com/flatpak/flatpak/releases/tag/0.8.9
CVE ID: CVE-2018-6561 State: PUBLISHED Published: 2018-02-02T15:00:00Z Last Updated: 2024-09-16T23:41:05.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/dijit_editor_xss.md
CVE ID: CVE-2018-6562 State: PUBLISHED Published: 2018-05-18T20:00:00 Last Updated: 2024-08-05T06:10:10.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSONP hijacking attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/542016/100/0/threaded - http://packetstormsecurity.com/files/147637/Totemomail-Encryption-Gateway-6.0.0_Build_371-JSONP-Hijacking.html - https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-002_totemo_json_hijacking.txt
CVE ID: CVE-2018-6563 State: PUBLISHED Published: 2018-06-20T14:00:00 Last Updated: 2024-08-05T06:10:10.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to hijack the authentication of users for requests that (1) change user settings, (2) send emails, or (3) change contact information by leveraging lack of an anti-CSRF token. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/147648/Totemomail-Encryption-Gateway-6.0.0_Build_371-Cross-Site-Request-Forgery.html - http://www.securityfocus.com/a
es/147648/Totemomail-Encryption-Gateway-6.0.0_Build_371-Cross-Site-Request-Forgery.html - http://www.securityfocus.com/archive/1/542015/100/0/threaded - https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-003_totemo_csrf.txt - https://www.exploit-db.com/exploits/44631/
CVE ID: CVE-2018-6569 State: PUBLISHED Published: 2018-02-06T00:00:00 Last Updated: 2024-08-05T06:10:10.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: West Wind Web Server 6.x does not require authentication for /ADMIN.ASP. Additional Analyst Notes: - CVE Program Container: References: - http://dfdrconsulting.com/cve-2018-6569-west-wind-web-server-unauthenticated-admin-access-process-execution-termination/
CVE ID: CVE-2018-6574 State: PUBLISHED Published: 2018-02-07T21:00:00 Last Updated: 2024-08-05T06:10:10.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1304 - https://access.redhat.com/errata/RHSA-2018:0878 - https://www.debian.org/security/2019/dsa-4380 - https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-65
:0878 - https://www.debian.org/security/2019/dsa-4380 - https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-6574 - https://groups.google.com/forum/#%21topic/golang-nuts/sprOaQ5m3Dk - https://github.com/golang/go/issues/23672 - https://groups.google.com/forum/#%21topic/golang-nuts/Gbhh1NxAjMU
CVE ID: CVE-2018-6575 State: PUBLISHED Published: 2018-02-02T17:00:00 Last Updated: 2024-08-05T06:10:10.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43957
CVE ID: CVE-2018-6576 State: PUBLISHED Published: 2018-02-02T17:00:00 Last Updated: 2024-08-05T06:10:10.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43949
CVE ID: CVE-2018-6577 State: PUBLISHED Published: 2018-02-02T17:00:00 Last Updated: 2024-08-05T06:10:10.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscriptions request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43940
CVE ID: CVE-2018-6578 State: PUBLISHED Published: 2018-02-02T17:00:00 Last Updated: 2024-08-05T06:10:10.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscriptions request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43948
CVE ID: CVE-2018-6579 State: PUBLISHED Published: 2018-02-02T17:00:00 Last Updated: 2024-08-05T06:10:10.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43950
CVE ID: CVE-2018-6580 State: PUBLISHED Published: 2018-02-02T17:00:00 Last Updated: 2024-08-05T06:10:10.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43958
CVE ID: CVE-2018-6581 State: PUBLISHED Published: 2018-02-02T17:00:00 Last Updated: 2024-08-05T06:10:10.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43959
CVE ID: CVE-2018-6582 State: PUBLISHED Published: 2018-02-05T21:00:00 Last Updated: 2024-08-05T06:10:10.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43976/
CVE ID: CVE-2018-6583 State: PUBLISHED Published: 2018-02-17T07:00:00 Last Updated: 2024-08-05T06:10:10.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44130
CVE ID: CVE-2018-6584 State: PUBLISHED Published: 2018-02-17T07:00:00 Last Updated: 2024-08-05T06:10:10.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44108
CVE ID: CVE-2018-6585 State: PUBLISHED Published: 2018-02-17T07:00:00 Last Updated: 2024-08-05T06:10:10.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter_creator or filter_events_cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44121
CVE ID: CVE-2018-6586 State: PUBLISHED Published: 2018-03-29T13:00:00Z Last Updated: 2024-09-16T18:48:41.800Z Vendors: CA Technologies Products: CA API Developer Portal Problem Types: CWE-79 Description: CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to profile picture processing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040603 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180328-01--security-notice-for-ca-api-developer-portal.html