Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-17467 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.863Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/844881 - https://chromereleases.googleblog.com/2018/10/stable-channel-upda
gentoo.org/glsa/201811-10 - https://crbug.com/844881 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17468 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.981Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityf
/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666 - https://crbug.com/876822
CVE ID: CVE-2018-17469 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.990Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/880675 - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://
ntoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17470 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:47:04.929Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/877874 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-
org/glsa/201811-10 - https://crbug.com/877874 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17471 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.974Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/873080 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securit
g.com/873080 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17472 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.944Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/822518 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17473 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.991Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://crbug.com/882078 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-
2078 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17474 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.993Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://crbug.com/843151 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.sec
g/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17475 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.975Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/852634 - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
ecurity.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17476 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:05.016Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/812769 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfoc
m/812769 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17477 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.947Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/863703 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.s
//crbug.com/863703 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17478 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:47:04.961Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/897512 - https://chromereleases.googleblog.com/2018/11/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-17479 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:47:05.027Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/905336 - https://chromereleases.googleblog.com/2018/11/stable-channel-update-for-chrome-os.html
CVE ID: CVE-2018-17480 State: PUBLISHED Published: 2018-12-11T15:00:00.000Z Last Updated: 2025-10-21T23:45:46.405Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/905940 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://ww
leblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-17481 State: PUBLISHED Published: 2018-12-11T15:00:00 Last Updated: 2024-08-05T10:47:04.919Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop_12.html - https://www.debian.org/security/2019/dsa-4395 - https://crbug.com/901654 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.c
/901654 - https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:3803 - https://www.debian.org/security/2018/dsa-4352 - http://www.securityfocus.com/bid/106084 - https://security.gentoo.org/glsa/201908-18
CVE ID: CVE-2018-17482 State: PUBLISHED Published: 2019-03-19T19:47:40.993158Z Last Updated: 2024-09-17T03:49:17.112Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AC:L/C:L/I:N/AV:L/PR:N/A:N/UI:N/S:U/RC:R/E:U/RL:U) Vendors: Jolly Technologies Products: Lobby Track Desktop Problem Types: Obtain Information Description: Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmclo
n sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149642
CVE ID: CVE-2018-17483 State: PUBLISHED Published: 2019-03-19T19:47:41.043121Z Last Updated: 2024-09-16T23:20:49.627Z Severity: LOW (CVSS 2.9 CVSS:3.0/AV:L/A:N/PR:N/I:N/UI:N/S:U/C:L/AC:H/RC:R/E:U/RL:U) Vendors: Jolly Technologies Products: Lobby Track Desktop Problem Types: Obtain Information Description: Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and viewing the driver's license column, an attacker could exploit this vulnerability to view the driver's license number and other personal information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xf
ber and other personal information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149643
CVE ID: CVE-2018-17484 State: PUBLISHED Published: 2019-03-19T19:47:41.089773Z Last Updated: 2024-09-16T22:55:41.190Z Severity: MEDIUM (CVSS 4 CVSS:3.0/I:L/AV:L/A:N/PR:N/UI:N/S:U/AC:H/C:L/RC:R/E:U/RL:U) Vendors: Jolly Technologies Products: Lobby Track Desktop Problem Types: Obtain Information Description: Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerab
database. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149644
CVE ID: CVE-2018-17485 State: PUBLISHED Published: 2019-03-19T19:47:41.139224Z Last Updated: 2024-09-17T02:05:43.929Z Severity: HIGH (CVSS 8.4 CVSS:3.0/S:U/UI:N/I:H/PR:N/A:H/AV:L/C:H/AC:L/RL:U/E:U/RC:R) Vendors: Jolly Technologies Products: Lobby Track Desktop Problem Types: Gain Access Description: Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149645
CVE ID: CVE-2018-17486 State: PUBLISHED Published: 2019-03-19T19:47:41.184542Z Last Updated: 2024-09-16T19:40:23.353Z Severity: LOW (CVSS 2.9 CVSS:3.0/C:N/AC:H/I:L/AV:L/PR:N/A:N/UI:N/S:U/RC:R/RL:U/E:U) Vendors: Jolly Technologies Products: Lobby Track Desktop Problem Types: Bypass Security Description: Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vuln
emove a host. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149646
CVE ID: CVE-2018-17487 State: PUBLISHED Published: 2019-03-19T19:47:41.225723Z Last Updated: 2024-09-16T22:03:35.075Z Severity: HIGH (CVSS 8.4 CVSS:3.0/C:H/AC:L/I:H/A:H/PR:N/AV:L/S:U/UI:N/RC:R/E:U/RL:U) Vendors: Jolly Technologies Products: Lobby Track Desktop Problem Types: Gain Privileges Description: Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and signing in as a visitor, an attacker could exploit this vulnerability using the command line to break out of kiosk mode. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilit
mode. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149647
CVE ID: CVE-2018-17488 State: PUBLISHED Published: 2019-03-19T19:47:41.265031Z Last Updated: 2024-09-16T17:39:20.304Z Severity: HIGH (CVSS 8.4 CVSS:3.0/UI:N/S:U/AV:L/A:H/PR:N/I:H/AC:L/C:H/E:U/RL:U/RC:R) Vendors: Jolly Technologies Products: Lobby Track Desktop Problem Types: Gain Privileges Description: Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vul
of kiosk mode. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149648
CVE ID: CVE-2018-17489 State: PUBLISHED Published: 2019-03-19T19:47:41.299635Z Last Updated: 2024-09-16T23:45:58.436Z Severity: LOW (CVSS 2.9 CVSS:3.0/S:U/UI:N/I:N/A:N/PR:N/AV:L/C:L/AC:H/E:U/RL:O/RC:C) Vendors: HID Global Products: EasyLobby Solo Problem Types: Obtain Information Description: EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext. By visiting the kiosk and viewing the Visitor table of the database, an attacker could exploit this vulnerability to view stored social security numbers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnera
y numbers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149649
CVE ID: CVE-2018-17490 State: PUBLISHED Published: 2019-03-19T19:47:41.336216Z Last Updated: 2024-09-16T17:02:59.615Z Severity: HIGH (CVSS 7.7 CVSS:3.0/UI:N/S:U/I:H/AV:L/PR:N/A:H/AC:L/C:N/RL:O/E:U/RC:C) Vendors: HID Global Products: EasyLobby Solo Problem Types: Denial of Service Description: EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local attacker could exploit this vulnerability to kill the process or launch new processes at will. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149650
CVE ID: CVE-2018-17491 State: PUBLISHED Published: 2019-03-19T19:47:41.374899Z Last Updated: 2024-09-16T20:51:35.415Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/C:H/PR:N/A:H/AV:L/I:H/S:U/UI:N/RC:C/RL:O/E:U) Vendors: HID Global Products: EasyLobby Solo Problem Types: Gain Privileges Description: EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing "esc" to exit the program, an attacker could exploit this vulnerability to perform unauthorized actions on the computer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149651
CVE ID: CVE-2018-17492 State: PUBLISHED Published: 2019-03-19T19:47:41.411621Z Last Updated: 2024-09-16T20:52:27.868Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/PR:N/A:H/I:H/UI:N/S:U/C:H/AC:L/E:U/RL:O/RC:C) Vendors: HID Global Products: EasyLobby Solo Problem Types: Gain Access Description: EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149652
CVE ID: CVE-2018-17493 State: PUBLISHED Published: 2019-03-19T19:47:41.452858Z Last Updated: 2024-09-16T16:48:18.116Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/C:H/I:H/AV:L/A:H/PR:N/UI:N/S:U/E:U/RL:O/RC:C) Vendors: VisitorPass Products: eVisitorPass Problem Types: Gain Privileges Description: eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button. By visiting the kiosk and clicking the full screen button in the bottom right, an attacker could exploit this vulnerability to close the program and launch other processes on the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.i
ther processes on the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149653
CVE ID: CVE-2018-17494 State: PUBLISHED Published: 2019-03-19T19:47:41.490548Z Last Updated: 2024-09-17T02:47:40.555Z Severity: HIGH (CVSS 8.4 CVSS:3.0/I:H/AV:L/A:H/PR:N/UI:N/S:U/AC:L/C:H/E:U/RL:O/RC:C) Vendors: VisitorPass Products: eVisitorPass Problem Types: Gain Privileges Description: eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Start Menu. By visiting the kiosk and pressing windows key twice, an attacker could exploit this vulnerability to close the program and launch other processes on the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vul
on the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149654
CVE ID: CVE-2018-17495 State: PUBLISHED Published: 2019-03-19T19:47:41.531562Z Last Updated: 2024-09-17T01:26:03.798Z Severity: HIGH (CVSS 8.4 CVSS:3.0/UI:N/S:U/I:H/AV:L/A:H/PR:N/AC:L/C:H/E:U/RL:O/RC:C) Vendors: VisitorPass Products: eVisitorPass Problem Types: Gain Privileges Description: eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prompt. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulner
and prompt. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149655
CVE ID: CVE-2018-17496 State: PUBLISHED Published: 2019-03-19T19:47:41.569667Z Last Updated: 2024-09-17T01:51:54.331Z Severity: HIGH (CVSS 8.4 CVSS:3.0/C:H/AC:L/I:H/A:H/PR:N/AV:L/S:U/UI:N/RC:C/RL:O/E:U) Vendors: VisitorPass Products: eVisitorPass Problem Types: Gain Privileges Description: eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting the kiosk and typing ctrl+shift+esc, an attacker could exploit this vulnerability to open the task manager to kill the process or launch new processes on the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vuln
n the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/149656