Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-15845 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:01:54.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gleez/cms/issues/800 - https://www.exploit-db.com/exploits/45258/
CVE ID: CVE-2018-15846 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:01:54.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can change the administrator's password via index.php?p=done&savedata=1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mattiapazienti/fledrCMS/issues/2
CVE ID: CVE-2018-15847 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:01:54.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/choregus/puppyCMS/issues/12
CVE ID: CVE-2018-15848 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:01:54.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Westbrookadmin/portfolioCMS/issues/1
CVE ID: CVE-2018-15849 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:01:54.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Westbrookadmin/portfolioCMS/issues/1
CVE ID: CVE-2018-15850 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redaxo/redaxo4/issues/420
CVE ID: CVE-2018-15851 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexocms/flexo1.source/issues/25
CVE ID: CVE-2018-15852 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:05.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions Additional Analyst Notes: - CVE Program Container: References: - https://bkd00r.wordpress.com/2018/08/24/
-date versions Additional Analyst Notes: - CVE Program Container: References: - https://bkd00r.wordpress.com/2018/08/24/cve-2018-15852-exploit-title-cable-modem-technicolor-tc7200-20-wifi-buffer-overflow/
CVE ID: CVE-2018-15853 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html - https://github.com/xkbcommon/libxkbcommon/commit/1f9d1248c
edesktop.org/archives/wayland-devel/2018-August/039232.html - https://github.com/xkbcommon/libxkbcommon/commit/1f9d1248c07cda8aaff762429c0dce146de8632a - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15854 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://github.com/xkbcommon/libxkbcommon/commit/e3cacae7b1bfda0d839c280494f23284a1187adf - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://lists.freedesktop.or
39c280494f23284a1187adf - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15855 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry section was mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html - https://github.com/xkbcommon/li
3786-2/ - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html - https://github.com/xkbcommon/libxkbcommon/commit/917636b1d0d70205a13f89062b95e3a0fc31d4ff - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15856 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://github.com/xkbcommon/libxkbcommon/commit/842e4351c2c97de6051cab6ce36b4a81e709a0e1 - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://lists.freedesktop.org/archives/wayl
e709a0e1 - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15857 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://usn.ubuntu.com/3786-1/ - https://github.com/xkbcommon/libxkbcommon/commit/c1e5ac16e77a21f87bdf3bc4dea61b037a17dddb - https://usn.ubuntu.com/3786-2/ - https://lists.freedeskto
libxkbcommon/commit/c1e5ac16e77a21f87bdf3bc4dea61b037a17dddb - https://usn.ubuntu.com/3786-2/ - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15858 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:05.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xkbcommon/libxkbcommon/commit/badb428e63387140720f22486b3acbd3d738859f - https://security.gentoo.org/glsa/201810-05 - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - http
9f - https://security.gentoo.org/glsa/201810-05 - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html
CVE ID: CVE-2018-15859 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:05.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html - https://usn.ubuntu.com/3786-1/ - https://github.com/xkbcom
edesktop.org/archives/wayland-devel/2018-August/039243.html - https://usn.ubuntu.com/3786-1/ - https://github.com/xkbcommon/libxkbcommon/commit/bb4909d2d8fa6b08155e449986a478101e2b2634 - https://usn.ubuntu.com/3786-2/ - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15861 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html - https://usn.ubuntu.com/3786-1/ - https://github.com/xkbcommon/libxkbcommon/commit/38
and-devel/2018-August/039243.html - https://usn.ubuntu.com/3786-1/ - https://github.com/xkbcommon/libxkbcommon/commit/38e1766bc6e20108948aec8a0b222a4bad0254e9 - https://usn.ubuntu.com/3786-2/ - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15862 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html - https://usn.ubuntu.com/3786-1/ - https://github.com/xkbcommon/libxkbcommon/commit/4e2ee9c3f6050
018-August/039243.html - https://usn.ubuntu.com/3786-1/ - https://github.com/xkbcommon/libxkbcommon/commit/4e2ee9c3f6050d773f8bbe05bc0edb17f1ff8371 - https://usn.ubuntu.com/3786-2/ - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15863 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html - https://github.com/xkbcommon/libxkbcommon/commit/96df3106d49438e442510c59acad306e
ayland-devel/2018-August/039243.html - https://github.com/xkbcommon/libxkbcommon/commit/96df3106d49438e442510c59acad306e94f3db4d - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15864 State: PUBLISHED Published: 2018-08-25T21:00:00 Last Updated: 2024-08-05T10:10:04.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-05 - https://lists.freedesktop.org/archives/wayland-devel/2018-August/039243.html - https://github.com/xkbcommon/libxkbcommon/commit/a
ists.freedesktop.org/archives/wayland-devel/2018-August/039243.html - https://github.com/xkbcommon/libxkbcommon/commit/a8ea7a1d3daa7bdcb877615ae0a252c189153bd2 - https://usn.ubuntu.com/3786-1/ - https://usn.ubuntu.com/3786-2/ - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-15865 State: PUBLISHED Published: 2018-09-06T23:00:00 Last Updated: 2024-08-05T10:10:04.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877
CVE ID: CVE-2018-15868 State: PUBLISHED Published: 2019-06-21T13:01:13 Last Updated: 2024-08-05T10:10:04.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChronoScan version 1.5.4.3 and earlier allows an unauthenticated attacker to execute arbitrary SQL commands via the wcr_machineid cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.chronoscan.org - https://redsec.io/chronoscan-enterprise-unauthenticated-sql-injection
CVE ID: CVE-2018-15869 State: PUBLISHED Published: 2018-08-25T00:00:00 Last Updated: 2024-08-05T10:10:05.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105172 - https://github.com/hashicorp/packer/issues/6584
CVE ID: CVE-2018-15870 State: PUBLISHED Published: 2018-08-25T19:00:00 Last Updated: 2024-08-05T10:10:04.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/122
CVE ID: CVE-2018-15871 State: PUBLISHED Published: 2018-08-25T19:00:00 Last Updated: 2024-08-05T10:10:05.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/123
CVE ID: CVE-2018-15873 State: PUBLISHED Published: 2018-08-28T19:00:00 Last Updated: 2024-08-05T10:10:04.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://hackpuntes.com/cve-2018-15873-sentrifugo-hrms-3-2-blind-sql-injection/
CVE ID: CVE-2018-15874 State: PUBLISHED Published: 2018-08-25T19:00:00 Last Updated: 2024-08-05T10:10:04.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_DHCP/dlink_dir615_xss_dhcp.md
CVE ID: CVE-2018-15875 State: PUBLISHED Published: 2018-08-25T19:00:00 Last Updated: 2024-08-05T10:10:04.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_UPnP/dlink_dir615_xss_upnp.md
CVE ID: CVE-2018-15876 State: PUBLISHED Published: 2018-08-26T07:00:00Z Last Updated: 2024-09-16T23:11:29.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ajax-bootmodal-login plugin 1.4.3 for WordPress. The register form, login form, and password-recovery form require solving a CAPTCHA to perform actions. However, this is required only once per user session, and therefore one could send as many requests as one wished by automation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aas-n/CVE/tree/master/ajax-bootmodal-login
CVE ID: CVE-2018-15877 State: PUBLISHED Published: 2018-08-26T07:00:00 Last Updated: 2024-08-05T10:10:04.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aas-n/CVE/tree/master/CVE-2018-15877 - https://www.exploit-db.com/exploits/45274/ - http://packetstormsecurity.com/files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html - http:/
acketstormsecurity.com/files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html - http://packetstormsecurity.com/files/163425/WordPress-Plainview-Activity-Monitor-20161228-Remote-Code-Execution.html
CVE ID: CVE-2018-15878 State: REJECTED Published: 2019-06-20T18:35:25 Last Updated: 2019-06-24T17:01:35 Description: No description available.
CVE ID: CVE-2018-15879 State: REJECTED Published: 2019-06-20T18:11:28 Last Updated: 2019-06-24T17:05:39 Description: No description available.
CVE ID: CVE-2018-15880 State: PUBLISHED Published: 2018-08-29T03:00:00 Last Updated: 2024-08-05T10:10:04.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a stored XSS attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105164 - https://developer.joomla.org/security-centre/744-20180802-core-stored-xss-vulnerability-in-the-frontend-profile.html - http://www.securitytracker.com/id/1041913
CVE ID: CVE-2018-15881 State: PUBLISHED Published: 2018-08-29T03:00:00 Last Updated: 2024-08-05T10:10:05.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105161 - http://www.securitytracker.com/id/1041913 - https://developer.joomla.org/security-centre/745-20180803-core-acl-violation-in-custom-fields.html
CVE ID: CVE-2018-15882 State: PUBLISHED Published: 2018-08-29T03:00:00 Last Updated: 2024-08-05T10:10:05.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105166 - https://developer.joomla.org/security-centre/743-20180801-core-hardening-the-inputfilter-for-phar-stubs.html - http://www.securitytracker.com/id/1041913
CVE ID: CVE-2018-15884 State: PUBLISHED Published: 2018-08-28T19:00:00 Last Updated: 2024-08-05T10:10:05.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149082/RICOH-MP-C4504ex-Cross-Site-Request-Forgery.html - https://www.exploit-db.com/exploits/45264/
CVE ID: CVE-2018-15885 State: PUBLISHED Published: 2018-08-26T21:00:00 Last Updated: 2024-08-05T10:10:05.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does not properly disrupt binary analysis for discovering the product's capabilities or purpose. This makes it easier for adversaries to detect the covert operation. Specifically, the product uses a compression technique to prevent the identification of certain libraries in the software by obfuscation. The software relies on a TLS callback and an additional executable file to enable these libraries and their access
tion. The software relies on a TLS callback and an additional executable file to enable these libraries and their access to certain websites. The unpacked software can be exploited by several different types of documented techniques. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GitHubAssessments/CVE_Assessment_02_2018/blob/master/FindMe_Report.pdf
CVE ID: CVE-2018-15886 State: PUBLISHED Published: 2018-09-10T13:00:00 Last Updated: 2024-08-05T10:10:05.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 does not properly restrict modified Snippet content, as demonstrated by the admin/index.php?id=snippets&action=edit_snippet&filename=google-analytics URI, which allows attackers to execute arbitrary PHP code by placing this code after a <?php substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/455
CVE ID: CVE-2018-15887 State: PUBLISHED Published: 2018-08-27T15:00:00 Last Updated: 2024-08-05T10:10:04.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Main_Analysis_Content.asp in ASUS DSL-N12E_C1 1.1.2.3_345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execute arbitrary OS commands via service parameters, such as shell metacharacters in the destIP parameter of a cmdMethod=ping request. Additional Analyst Notes: - CVE Program Container: References: - https://fakhrizulkifli.github.io/CVE-2018-15887.html