Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-8923 State: PUBLISHED Published: 2018-06-05T14:00:00Z Last Updated: 2024-09-16T22:03:41.521Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: File Station Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/zh-tw/support/security/Synology_SA_18_09
CVE ID: CVE-2018-8924 State: PUBLISHED Published: 2018-06-05T14:00:00Z Last Updated: 2024-09-16T18:12:50.002Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Office Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/zh-tw/support/security/Synology_SA_18_12
CVE ID: CVE-2018-8925 State: PUBLISHED Published: 2018-06-08T13:00:00Z Last Updated: 2024-09-16T23:16:56.731Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Synology Products: Photo Station Problem Types: Cross Site Request Forgery (CSRF) Description: Cross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote attackers to hijack the authentication of administrators via the (1) username, (2) password, (3) admin, (4) action, (5) uid, or (6) modify_admin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/zh-tw/support/security/Sy
ter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/zh-tw/support/security/Synology_SA_18_15
CVE ID: CVE-2018-8926 State: PUBLISHED Published: 2018-06-08T13:00:00Z Last Updated: 2024-09-16T19:04:50.442Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Photo Station Problem Types: CWE-625 Description: Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct privilege escalation attacks via the fullname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/zh-tw/support/security/Synology_SA_18_15
CVE ID: CVE-2018-8927 State: PUBLISHED Published: 2018-06-14T14:00:00Z Last Updated: 2024-09-16T17:34:04.395Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Synology Products: Calendar Problem Types: CWE-863 Description: Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_16
CVE ID: CVE-2018-8928 State: PUBLISHED Published: 2018-07-05T13:00:00Z Last Updated: 2024-09-17T02:37:37.641Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: CardDAV Server Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the (1) family_name, (2) given_name, or (3) additional_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_10
CVE ID: CVE-2018-8929 State: PUBLISHED Published: 2018-07-06T12:00:00Z Last Updated: 2024-09-16T20:41:43.731Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Synology Products: SSL VPN Client Problem Types: CWE-319 Description: Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-0224 allows remote attackers to conduct man-in-the-middle attacks via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_19
CVE ID: CVE-2018-8930 State: PUBLISHED Published: 2018-03-22T14:00:00 Last Updated: 2024-08-05T07:10:47.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03841en_us - https://amdflaws.com/ - https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/ - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment
-technical-summary/ - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research - https://safefirmware.com/amdflaws_whitepaper.pdf
CVE ID: CVE-2018-8931 State: PUBLISHED Published: 2018-03-22T14:00:00 Last Updated: 2024-08-05T07:10:46.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1. Additional Analyst Notes: - CVE Program Container: References: - https://amdflaws.com/ - https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/ - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research - https://safefirmware.com/amdflaws_whitepaper.pdf
CVE ID: CVE-2018-8932 State: PUBLISHED Published: 2018-03-22T14:00:00 Last Updated: 2024-08-05T07:10:47.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4. Additional Analyst Notes: - CVE Program Container: References: - https://amdflaws.com/ - https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/ - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research - https://safefirmware.com/amdflaws_whitepaper.pdf
CVE ID: CVE-2018-8933 State: PUBLISHED Published: 2018-03-22T14:00:00 Last Updated: 2024-08-05T07:10:46.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03841en_us - https://amdflaws.com/ - https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/ - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research - https://safef
ty.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research - https://safefirmware.com/amdflaws_whitepaper.pdf
CVE ID: CVE-2018-8934 State: PUBLISHED Published: 2018-03-22T14:00:00 Last Updated: 2024-08-05T07:10:46.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW. Additional Analyst Notes: - CVE Program Container: References: - https://amdflaws.com/ - https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/ - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research - https://safefirmware.com/amdflaws_whitepaper.pdf
CVE ID: CVE-2018-8935 State: PUBLISHED Published: 2018-03-22T14:00:00 Last Updated: 2024-08-05T07:10:46.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW. Additional Analyst Notes: - CVE Program Container: References: - https://amdflaws.com/ - https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/ - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research - https://safefirmware.com/amdflaws_whitepaper.pdf
CVE ID: CVE-2018-8936 State: PUBLISHED Published: 2018-03-22T14:00:00 Last Updated: 2024-08-05T07:10:46.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://amdflaws.com/ - https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/ - https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research - https://safefirmware.com/amdflaws_whitepaper.pdf
CVE ID: CVE-2018-8937 State: PUBLISHED Published: 2018-03-26T17:00:00 Last Updated: 2024-08-05T07:10:47.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /login URI to trigger an open redirect. A "data:text/html;base64," payload can be used with JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://nileshsapariya.blogspot.ae/2018/03/open-redirect-to-reflected-xss-open.html
CVE ID: CVE-2018-8938 State: PUBLISHED Published: 2018-05-01T16:00:00 Last Updated: 2024-08-05T07:10:47.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server. Additional Analyst Notes: - CVE Program Container: References: - https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm
CVE ID: CVE-2018-8939 State: PUBLISHED Published: 2018-05-01T16:00:00 Last Updated: 2024-08-05T07:10:47.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands. Additional Analyst Notes: - CVE Program Container: References: - https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm
CVE ID: CVE-2018-8940 State: PUBLISHED Published: 2019-05-14T18:12:46 Last Updated: 2024-08-05T07:10:46.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClientServiceConfigController.cs in Enghouse Cloud Contact Center Platform 7.2.5 has functionality for loading external XML files and parsing them, allowing an attacker to upload a malicious XML file and reference it in the URL of the application, forcing the application to load and parse the malicious XML file, aka an XXE issue. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2019/May/9
CVE ID: CVE-2018-8941 State: PUBLISHED Published: 2018-04-03T23:00:00 Last Updated: 2024-08-05T07:10:47.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set Diagnostics_Entry' function in an HTTP request, related to /userfs/bin/tcapi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SECFORCE/CVE-2018-8941
CVE ID: CVE-2018-8942 State: PUBLISHED Published: 2018-03-22T21:00:00Z Last Updated: 2024-09-16T17:33:24.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiuno BBS 4.0.0 has XSS in the adminpage sitename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97103
CVE ID: CVE-2018-8943 State: PUBLISHED Published: 2018-03-22T21:00:00Z Last Updated: 2024-09-16T18:09:06.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a SQL injection in the PHPSHE 1.6 userbank parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97123
CVE ID: CVE-2018-8944 State: PUBLISHED Published: 2018-03-22T21:00:00Z Last Updated: 2024-09-16T20:37:48.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPOK 4.8.338 has an arbitrary file upload vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97155
CVE ID: CVE-2018-8945 State: PUBLISHED Published: 2018-03-22T21:00:00 Last Updated: 2024-08-05T07:10:47.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (segmentation fault) via a large attribute section. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3032 - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22809 - https://access.redhat.com/errata/RHBA-2019:0327 - http://lists.opensuse.
sourceware.org/bugzilla/show_bug.cgi?id=22809 - https://access.redhat.com/errata/RHBA-2019:0327 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-8947 State: PUBLISHED Published: 2018-03-25T16:00:00 Last Updated: 2024-08-05T07:10:47.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rap2hpoutre/laravel-log-viewer/commit/cda89c06dc5331d06fab863d7cb1c4047ad68357 - https://github.com/rap2hpoutre/laravel-log-viewer/releases/tag/v0.13.0 - https://www.exploit-db.com/exploits/44343/
CVE ID: CVE-2018-8948 State: PUBLISHED Published: 2018-03-23T17:00:00Z Last Updated: 2024-09-16T23:40:44.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MISP before 2.4.89, app/View/Events/resolved_attributes.ctp has multiple XSS issues via a malicious MISP module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/01924cd948dbceb8391be671dab672e9f4a0ffe8
CVE ID: CVE-2018-8949 State: PUBLISHED Published: 2018-03-23T17:00:00Z Last Updated: 2024-09-16T17:28:15.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event (without attribute UUIDs but attribute IDs set) could overwrite an existing attribute. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/37720c38d6c617439df0a13e9396fcb26345dadd
CVE ID: CVE-2018-8953 State: PUBLISHED Published: 2018-04-11T17:00:00Z Last Updated: 2024-09-16T20:22:08.181Z Vendors: CA Technologies Products: Workload Automation AE Problem Types: SQL Injection Description: CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040605 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180329-01--security-notice-for-ca-workload-automation-ae.html - http://www.securityfocus.com/bid/103742
CVE ID: CVE-2018-8954 State: PUBLISHED Published: 2018-04-11T17:00:00Z Last Updated: 2024-09-17T01:31:54.293Z Vendors: CA Technologies Products: Workload Control Center Problem Types: Arbitrary Code Execution Description: CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040605 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180329-01--security-notice-for-ca-workload-automation-ae.html - http://www.securityfocus.com/bid/103742
CVE ID: CVE-2018-8955 State: PUBLISHED Published: 2018-10-24T22:00:00 Last Updated: 2024-08-05T07:10:47.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149900/Bitdefender-GravityZone-Installer-Signature-Bypass-Code-Execution.html - https://labs.nettitude.com/blog/cve-2018-8955-bitdefender-gravityzone-arbitrary-cod
gnature-Bypass-Code-Execution.html - https://labs.nettitude.com/blog/cve-2018-8955-bitdefender-gravityzone-arbitrary-code-execution/ - http://seclists.org/fulldisclosure/2018/Oct/44 - http://www.securitytracker.com/id/1041940
CVE ID: CVE-2018-8956 State: PUBLISHED Published: 2020-05-06T18:03:41 Last Updated: 2024-08-05T07:10:47.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.ntp.org/ - https://tools.ietf.org/html/rfc5905
ditional Analyst Notes: - CVE Program Container: References: - http://www.ntp.org/ - https://tools.ietf.org/html/rfc5905 - https://nikhiltripathi.in/NTP_attack.pdf - https://arxiv.org/abs/2005.01783 - https://security.netapp.com/advisory/ntap-20200518-0006/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html
CVE ID: CVE-2018-8957 State: PUBLISHED Published: 2018-03-23T21:00:00 Last Updated: 2024-08-05T07:10:47.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoverCMS v1.1.6 has XSS via the fourth input box to index.php, related to admina/mconfigs.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ttylx/Cve_reveal - https://github.com/ttylx/Cve_reveal/blob/master/CoverCMS_01/re.md - https://github.com/ttylx/Cve_reveal/blob/master/CoverCMS_01/Covercms_1.md
CVE ID: CVE-2018-8960 State: PUBLISHED Published: 2018-03-23T21:00:00 Last Updated: 2024-08-05T07:10:47.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1020 - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/103523 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2018-8961 State: PUBLISHED Published: 2018-03-23T21:00:00Z Last Updated: 2024-09-16T21:03:28.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, the decompilePUSHPARAM function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/130
CVE ID: CVE-2018-8962 State: PUBLISHED Published: 2018-03-23T21:00:00Z Last Updated: 2024-09-17T03:52:36.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/130
CVE ID: CVE-2018-8963 State: PUBLISHED Published: 2018-03-23T21:00:00Z Last Updated: 2024-09-17T00:41:20.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, the decompileGETVARIABLE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/130
CVE ID: CVE-2018-8964 State: PUBLISHED Published: 2018-03-23T21:00:00Z Last Updated: 2024-09-16T19:50:41.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/130
CVE ID: CVE-2018-8965 State: PUBLISHED Published: 2018-03-24T18:00:00 Last Updated: 2024-08-05T07:10:47.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/zzcms_8.2/ppsave.php.md
CVE ID: CVE-2018-8966 State: PUBLISHED Published: 2018-03-24T18:00:00 Last Updated: 2024-08-05T07:10:47.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/zzcms_8.2/install.md
CVE ID: CVE-2018-8967 State: PUBLISHED Published: 2018-03-24T18:00:00 Last Updated: 2024-08-05T07:10:47.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in an adv2.php?action=modify request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/zzcms_8.2/adv2.php.md
CVE ID: CVE-2018-8968 State: PUBLISHED Published: 2018-03-24T18:00:00 Last Updated: 2024-08-05T07:10:47.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/zzcms_8.2/manage.php.md