Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-8969 State: PUBLISHED Published: 2018-03-24T18:00:00 Last Updated: 2024-08-05T07:10:47.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zzcms 8.2. user/licence_save.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/zzcms_8.2/licence_save.php.md
CVE ID: CVE-2018-8970 State: PUBLISHED Published: 2018-03-24T21:00:00 Last Updated: 2024-08-05T07:10:47.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes silent omission of hostname verification, and consequently allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: the LibreSSL documentation indicates that this special case is supported, but the BoringSSL documentation does not. Additional Analyst Notes: - CVE Program Container: References
se is supported, but the BoringSSL documentation does not. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libressl-portable/openbsd/commit/0654414afcce51a16d35d05060190a3ec4618d42 - https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.1-relnotes.txt - https://boringssl.googlesource.com/boringssl/+/e759a9cd84198613199259dbed401f4951747cff
CVE ID: CVE-2018-8971 State: PUBLISHED Published: 2018-03-24T21:00:00 Last Updated: 2024-08-05T07:10:47.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration, leading to signing in unintended users. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/03/20/critical-security-release-gitlab-10-dot-5-dot-6-released/ - https://www.debian.org/security/2018/dsa-4206
CVE ID: CVE-2018-8972 State: PUBLISHED Published: 2018-03-24T22:00:00Z Last Updated: 2024-09-17T02:10:48.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a PHP shell that calls eval on request parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CREDITWEST/CWCMS/issues/1
CVE ID: CVE-2018-8973 State: PUBLISHED Published: 2018-03-24T22:00:00Z Last Updated: 2024-09-16T17:28:29.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWord_deal.php?mudi=add request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yaxuan404/OTCMS_3.2
CVE ID: CVE-2018-8974 State: PUBLISHED Published: 2018-04-26T06:00:00 Last Updated: 2024-08-05T07:10:47.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'Source<script type="text/javascript" src=' line. Fix released on 2018-03-28. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CDCgov/MicrobeTRACE/releases/tag/v0.1.11 - https://github.com/wshepherd0010/advisories/blob/master/CVE-2018-8974.md - https://github.com/CDCgov/MicrobeTrace/commit/3142b76c082bd83e1506c9840fb
0010/advisories/blob/master/CVE-2018-8974.md - https://github.com/CDCgov/MicrobeTrace/commit/3142b76c082bd83e1506c9840fbe0b6da382e682
CVE ID: CVE-2018-8975 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiaoqx/pocs/blob/master/netpbm - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00056.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVMWVVFEADMA7XIPXFHGSBRY
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVMWVVFEADMA7XIPXFHGSBRYKEGGDFGE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEZRUJ5LNGULJL7QUAHPV5LBOKIJYP5I/
CVE ID: CVE-2018-8976 State: PUBLISHED Published: 2018-03-25T00:00:00 Last Updated: 2024-08-05T07:10:47.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/246 - https://security.gentoo.org/glsa/201811-14 - https://access.redhat.com/errata/RHSA-2019:2101 - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2018-8977 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service (invalid memory access) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/247 - https://security.gentoo.org/glsa/201811-14 - https://access.redhat.com/errata/RHSA-2019:2101
CVE ID: CVE-2018-8978 State: PUBLISHED Published: 2018-03-25T19:00:00 Last Updated: 2024-08-05T07:10:47.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI. Additional Analyst Notes: - CVE Program Container: References: - https://nileshsapariya.blogspot.ae/2018/03/open-redirect-to-reflected-xss-open.html
CVE ID: CVE-2018-8979 State: PUBLISHED Published: 2018-03-25T19:00:00 Last Updated: 2024-08-05T07:10:47.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI. Additional Analyst Notes: - CVE Program Container: References: - https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html - https://www.exploit-db.com/exploits/44360/
CVE ID: CVE-2018-8988 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002008. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002008
CVE ID: CVE-2018-8989 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002006. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002006
CVE ID: CVE-2018-8990 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002010. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002010
CVE ID: CVE-2018-8991 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002009. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002009
CVE ID: CVE-2018-8992 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002005. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002005
CVE ID: CVE-2018-8993 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002001. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002001
CVE ID: CVE-2018-8994 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002003. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002003
CVE ID: CVE-2018-8995 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002002. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002002
CVE ID: CVE-2018-8996 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002007. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002007
CVE ID: CVE-2018-8997 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002004. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002004
CVE ID: CVE-2018-8998 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060cc
CVE ID: CVE-2018-8999 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060c4
CVE ID: CVE-2018-9000 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c402004
CVE ID: CVE-2018-9001 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c402000
CVE ID: CVE-2018-9002 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060cc
CVE ID: CVE-2018-9003 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c402000
CVE ID: CVE-2018-9004 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060d0
CVE ID: CVE-2018-9005 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060d0
CVE ID: CVE-2018-9006 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c402004
CVE ID: CVE-2018-9007 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060c4
CVE ID: CVE-2018-9009 State: PUBLISHED Published: 2018-03-25T03:00:00 Last Updated: 2024-08-05T07:10:47.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/131 - https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDITBVRDNDCSFNBJ3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBFCINUX3XXAPPH77OH6N
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBFCINUX3XXAPPH77OH6NKACBPFBQXXW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQNIJH5EQV2D6KEFGY2467ZS4I7TZLXP/
CVE ID: CVE-2018-9010 State: PUBLISHED Published: 2018-03-25T18:00:00 Last Updated: 2024-08-05T07:10:47.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44317/
CVE ID: CVE-2018-9014 State: PUBLISHED Published: 2018-03-25T18:00:00 Last Updated: 2024-08-05T07:10:47.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug4.md
CVE ID: CVE-2018-9015 State: PUBLISHED Published: 2018-03-25T18:00:00 Last Updated: 2024-08-05T07:10:47.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug5.md
CVE ID: CVE-2018-9016 State: PUBLISHED Published: 2018-03-25T18:00:00 Last Updated: 2024-08-05T07:10:47.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug2.md
CVE ID: CVE-2018-9017 State: PUBLISHED Published: 2018-03-25T18:00:00 Last Updated: 2024-08-05T07:10:47.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug3.md
CVE ID: CVE-2018-9018 State: PUBLISHED Published: 2018-03-25T21:00:00 Last Updated: 2024-08-05T07:10:47.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html - https://www.debian.org/security/2018/dsa-4321 - https://sourceforge.net/p/graphicsmagick/bugs/554/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://www.secur
e.net/p/graphicsmagick/bugs/554/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://www.securityfocus.com/bid/103526 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IYH7QSNXXOIDFTYLY455ANZ3JWQ7FCS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FS76VNCFL3FVRMGXQEMHBOKA7EE46BTS/
CVE ID: CVE-2018-9019 State: PUBLISHED Published: 2018-05-22T20:00:00 Last Updated: 2024-08-05T07:10:47.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php, or /admin/website.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpujan2021.html - https://github.com/Dolibarr/dolibarr/commit/83b762b681c6dfdceb809d26ce95f3667
acle.com/security-alerts/cpujan2021.html - https://github.com/Dolibarr/dolibarr/commit/83b762b681c6dfdceb809d26ce95f3667b614739 - https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog