Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5196 State: PUBLISHED Published: 2018-12-21T15:00:00Z Last Updated: 2024-09-16T18:48:27.749Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Estsoft Products: Alzip Problem Types: Stack based overflow Description: Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=27688 - https://www.altools.co.kr/Support/Notice_Contents.aspx?idx=1677&page=2&t=
CVE ID: CVE-2018-5197 State: PUBLISHED Published: 2019-01-02T14:00:00 Last Updated: 2024-08-05T05:26:46.975Z Vendors: TOBESOFT Products: XPLATFORM ActiveX Problem Types: Command Injection Description: A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause arbitrary command to execute. Additional Analyst Notes: - CVE Program Container: References: - http://support.tobesoft.co.kr/Support/index.html - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writin
ces: - http://support.tobesoft.co.kr/Support/index.html - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30097
CVE ID: CVE-2018-5198 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-16T23:11:26.595Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: WIZVERA Products: Veraport Problem Types: Race Condition Description: In Veraport G3 ALL on MacOS, a race condition when calling the Veraport API allow remote attacker to cause arbitrary file download and execution. This results in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30112
CVE ID: CVE-2018-5199 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-17T00:02:37.228Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: WIZVERA Products: Veraport Problem Types: Remote Code Execution Description: In Veraport G3 ALL on MacOS, due to insufficient domain validation, It is possible to overwrite installation file to malicious file. A remote unauthenticated attacker may use this vulnerability to execute arbitrary file. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30112
CVE ID: CVE-2018-5200 State: PUBLISHED Published: 2018-12-20T14:00:00Z Last Updated: 2024-09-16T23:25:26.922Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Pandora.tv Products: KMPlayer Problem Types: Heap based overflow Description: KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_seq
nalyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30113
CVE ID: CVE-2018-5201 State: PUBLISHED Published: 2018-12-21T16:00:00 Last Updated: 2024-08-05T05:26:46.987Z Vendors: HANCOM Products: Hancom Office Problem Types: Heap overflow Description: Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when handling Compound File in document. This result in a program crash or denial of service conditions. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30116
CVE ID: CVE-2018-5202 State: PUBLISHED Published: 2018-12-21T16:00:00Z Last Updated: 2024-09-16T20:36:19.536Z Vendors: SIGNKOREA Products: SKCertService Problem Types: Remote code execution Description: SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30119
CVE ID: CVE-2018-5203 State: PUBLISHED Published: 2018-12-28T16:00:00 Last Updated: 2024-08-05T05:26:47.205Z Vendors: Devpia Products: DEXTUploadX5 Problem Types: file download and execution Description: DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30122
CVE ID: CVE-2018-5204 State: PUBLISHED Published: 2018-12-28T16:00:00 Last Updated: 2024-08-05T05:26:46.991Z Vendors: Infraware Products: ML Report Problem Types: file download and execution Description: ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30123
CVE ID: CVE-2018-5205 State: PUBLISHED Published: 2018-01-06T16:00:00 Last Updated: 2024-08-05T05:26:47.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3527-1/ - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_01.txt
CVE ID: CVE-2018-5206 State: PUBLISHED Published: 2018-01-06T16:00:00 Last Updated: 2024-08-05T05:26:47.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_01.txt
CVE ID: CVE-2018-5207 State: PUBLISHED Published: 2018-01-06T16:00:00 Last Updated: 2024-08-05T05:26:47.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_01.txt
CVE ID: CVE-2018-5208 State: PUBLISHED Published: 2018-01-06T16:00:00 Last Updated: 2024-08-05T05:26:47.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4162 - https://irssi.org/security/irssi_sa_2018_01.txt
CVE ID: CVE-2018-5210 State: PUBLISHED Published: 2018-01-04T06:00:00 Last Updated: 2024-08-05T05:26:47.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a brute-force attack to discover unlock information (PIN, password, or pattern). The Samsung ID is SVE-2017-10733. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2018-5211 State: PUBLISHED Published: 2018-01-09T16:00:00 Last Updated: 2024-08-05T05:26:47.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43409/
CVE ID: CVE-2018-5212 State: PUBLISHED Published: 2018-01-04T18:00:00 Last Updated: 2024-08-05T05:26:47.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an edit action to wp-admin/post.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/simple-download-monitor.md - https://github.com/Arsenal21/simple-download-monitor/issues/27 - https://wordpress.org/support/topic/stored-xss-bug-at-the-latest-version-of-simple-download-monitor/ - https://github.com/Arsenal21/simple-dow
support/topic/stored-xss-bug-at-the-latest-version-of-simple-download-monitor/ - https://github.com/Arsenal21/simple-download-monitor/commit/8ab8b9166bc87feba26a1573cf595af48eff7805
CVE ID: CVE-2018-5213 State: PUBLISHED Published: 2018-01-04T18:00:00 Last Updated: 2024-08-05T05:26:47.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action to wp-admin/post.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/simple-download-monitor.md - https://github.com/Arsenal21/simple-download-monitor/issues/27 - https://wordpress.org/support/topic/stored-xss-bug-at-the-latest-version-of-simple-download-monitor/ - https://github.com/Arsenal21/simple-download-m
/topic/stored-xss-bug-at-the-latest-version-of-simple-download-monitor/ - https://github.com/Arsenal21/simple-download-monitor/commit/8ab8b9166bc87feba26a1573cf595af48eff7805
CVE ID: CVE-2018-5214 State: PUBLISHED Published: 2018-01-04T18:00:00 Last Updated: 2024-08-05T05:26:47.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/support/topic/stored-xss-bug-at-the-latest-version-of-add-link-to-facebook/ - https://github.com/d4wner/Vulnerabilities-Report/blob/master/Add-Link-to-Facebook.md
CVE ID: CVE-2018-5215 State: PUBLISHED Published: 2018-01-04T19:00:00Z Last Updated: 2024-09-16T21:57:50.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/forkcms.md
CVE ID: CVE-2018-5216 State: PUBLISHED Published: 2018-01-04T19:00:00Z Last Updated: 2024-09-17T00:00:40.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/radiantcms.md
CVE ID: CVE-2018-5217 State: PUBLISHED Published: 2018-01-04T19:00:00Z Last Updated: 2024-09-16T20:22:32.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x95002578. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/K7AntiVirus_POC/tree/master/1_95002578
CVE ID: CVE-2018-5218 State: PUBLISHED Published: 2018-01-04T19:00:00Z Last Updated: 2024-09-17T02:51:34.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x950025b0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/K7AntiVirus_POC/tree/master/1_950025b0
CVE ID: CVE-2018-5219 State: PUBLISHED Published: 2018-01-04T19:00:00Z Last Updated: 2024-09-16T17:15:26.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: In K7 Antivirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002168. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/K7AntiVirus_POC/tree/master/1_83002168
CVE ID: CVE-2018-5220 State: PUBLISHED Published: 2018-01-04T19:00:00Z Last Updated: 2024-09-16T20:51:52.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x95002610. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyfly/K7AntiVirus_POC/tree/master/1_95002610
CVE ID: CVE-2018-5221 State: PUBLISHED Published: 2018-01-09T16:00:00 Last Updated: 2024-08-05T05:26:47.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in BarCodeWiz BarCode before 6.7 ActiveX control (BarcodeWiz.DLL) allow remote attackers to execute arbitrary code via a long argument to the (1) BottomText or (2) TopText property. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/BARCODEWIZ-v6.7-ACTIVEX-COMPONENT-BUFFER-OVERFLOW.txt - http://packetstormsecurity.com/files/145731/BarcodeWiz-ActiveX-Control-Buffer-Overflow.html
CVE ID: CVE-2018-5223 State: PUBLISHED Published: 2018-03-29T13:00:00Z Last Updated: 2024-09-16T19:56:55.062Z Vendors: Atlassian Products: Fisheye and Crucible Problem Types: Argument Injection Description: Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to add a repository in Fisheye or Crucible can execute code of their choice on systems that run a vulnerable version of Fisheye or Crucible on the Windows operating system. All versions of Fisheye and Crucible before 4.4.6 (the fixed version for 4.4.x) and from 4.5.0 before 4.5.3 (the fixed
. All versions of Fisheye and Crucible before 4.4.6 (the fixed version for 4.4.x) and from 4.5.0 before 4.5.3 (the fixed version for 4.5.x) are affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://confluence.atlassian.com/x/aS5sO - https://jira.atlassian.com/browse/CRUC-8181 - http://www.securityfocus.com/bid/103665 - https://confluence.atlassian.com/x/Zi5sO - https://jira.atlassian.com/browse/FE-7014
CVE ID: CVE-2018-5224 State: PUBLISHED Published: 2018-03-29T13:00:00Z Last Updated: 2024-09-16T18:04:23.118Z Vendors: Atlassian Products: Bamboo Problem Types: Argument Injection Description: Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan in Bamboo that has a non-linked Mercurial repository, or create a plan in Bamboo either globally or in a project using Bamboo Specs can can execute code of their choice on systems that run a vulnerable version of Bamboo on the Windows operating system. All versio
cute code of their choice on systems that run a vulnerable version of Bamboo on the Windows operating system. All versions of Bamboo starting with 2.7.0 before 6.3.3 (the fixed version for 6.3.x) and from version 6.4.0 before 6.4.1 (the fixed version for 6.4.x) running on the Windows operating system are affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103653 - https://jira.atlassian.com/browse/BAM-19743 - https://confluence.atlassian.com/x/PS9sO
CVE ID: CVE-2018-5225 State: PUBLISHED Published: 2018-03-22T13:00:00Z Last Updated: 2024-09-16T18:49:04.214Z Vendors: Atlassian Products: Bitbucket Server Problem Types: n/a Description: In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed version for 5.5.x), 5.6.0 before 5.6.5 (the fixed version for 5.6.x), 5.7.0 before 5.7.3 (the fixed version for 5.7.x), and 5.8.0 before 5.8.2 (the fixed version for 5.8.x), allows authenticated users to gain remote code execution using the in browser editing feature via editing a symbolic link within a repository. Additional Analyst Notes: - CVE Progr
ng the in browser editing feature via editing a symbolic link within a repository. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-10684 - http://www.securityfocus.com/bid/103488 - https://confluence.atlassian.com/x/3WNsO
CVE ID: CVE-2018-5226 State: PUBLISHED Published: 2018-04-25T21:00:00Z Last Updated: 2024-09-16T20:32:16.150Z Vendors: Atlassian Products: SourceTree Windows Problem Types: OS Command Injection Description: There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. All versions of Sourcetree for Windows before 2.5.5.0 are affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/brows
by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/SRCTREEWIN-8509
CVE ID: CVE-2018-5227 State: PUBLISHED Published: 2018-04-10T13:00:00Z Last Updated: 2024-09-17T01:56:13.508Z Vendors: Atlassian Products: Atlassian Application Links Problem Types: Cross Site Scripting (XSS) Description: Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the display url of a configured application link. Additional Analyst Notes: - CVE Program Container: References: - https://ecosystem.atlassian.net/browse/APL-1361 - http://www.securityfocus.com/bid/103731
CVE ID: CVE-2018-5228 State: PUBLISHED Published: 2018-04-24T12:00:00Z Last Updated: 2024-09-17T00:51:54.409Z Vendors: Atlassian Products: Fisheye and Crucible Problem Types: Cross Site Scripting (XSS) Description: The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the handling of response headers. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/FE-7035 - http://www.securityfocus.com/bid/104006 - https://jira.atlassian.com/browse/CRUC-8201
CVE ID: CVE-2018-5229 State: PUBLISHED Published: 2018-07-16T13:00:00Z Last Updated: 2024-09-17T03:18:22.247Z Vendors: Atlassian Products: Universal Plugin Manager Problem Types: Cross Site Scripting (XSS) Description: The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of user submitted add-on names. Additional Analyst Notes: - CVE Program Container: References: - https://ecosystem.atlassian.net/browse/UPM-5871
CVE ID: CVE-2018-5230 State: PUBLISHED Published: 2018-05-14T13:00:00Z Last Updated: 2024-09-16T23:02:02.191Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: The issue collector in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the error message of custom fields when an invalid value is specified. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-67289
CVE ID: CVE-2018-5231 State: PUBLISHED Published: 2018-05-16T13:00:00Z Last Updated: 2024-09-16T20:31:48.634Z Vendors: Atlassian Products: Jira Problem Types: Denial of Service Description: The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104205 - https://jira.atlassian.com/browse/JRASERVER-67290
CVE ID: CVE-2018-5232 State: PUBLISHED Published: 2018-07-18T14:00:00Z Last Updated: 2024-09-16T17:37:58.152Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuetype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-67410
CVE ID: CVE-2018-5233 State: PUBLISHED Published: 2018-03-19T21:00:00 Last Updated: 2024-08-05T05:33:42.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/2018-03-15-cve-2018-5233-grav-cms-admin-plugin-reflected-cross-site-scripting-xss-vulnerability/ - http://www.openwall.com/lists/oss-security/2018/03/15/1
CVE ID: CVE-2018-5234 State: PUBLISHED Published: 2018-04-30T18:00:00Z Last Updated: 2024-09-16T22:40:19.776Z Vendors: Symantec Corporation Products: Norton Core Problem Types: CMD Injection Description: The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00 - https://www.exploit-db.com/exploits/44574/ - http://www.securityfocus.com/bid/103
rity_advisory&year=&suid=20180430_00 - https://www.exploit-db.com/exploits/44574/ - http://www.securityfocus.com/bid/103955