Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
r process. Description: The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a race-condition vulnerability that may allow any users with domain save privileges to gain superuser privileges. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: v
Reports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-server-2018-18808 - http://www.securityfocus.com/bid/107350
CVE ID: CVE-2018-18809 State: PUBLISHED Published: 2019-03-07T22:00:00.000Z Last Updated: 2025-10-21T23:45:42.384Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS Problem Types: The impact of this vulnerability includes the theoretical possibility that a web server using the provided Defaul
Types: The impact of this vulnerability includes the theoretical possibility that a web server using the provided DefaultWebResourceHandler could expose details of the host system. The disclosed data could include credentials to access other systems. Description: The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a directory-traversal
spersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a directory-traversal vulnerability that may theoretically allow web server users to access contents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: versions up to and including 6.3.4; 6.4.1; 6.4.2; 6.4.21; 7.1.0; 7.2.0, TIBCO JasperReports Library Community Edition: versions up to and including 6.7.0, TIBCO JasperReports Library for ActiveMatrix BPM: versions up to and including 6.4.21, TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and i
d including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.3; 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-library-2018-18809 - http://www.securityfocus.com/bid/1073
9/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-library-2018-18809 - http://www.securityfocus.com/bid/107351 - http://seclists.org/fulldisclosure/2019/Sep/17 - http://packetstormsecurity.com/files/154406/Tibco-JasperSoft-Path-Traversal.html - https://security.elarlang.eu/cve-2018-18809-path-traversal-in-tibco-jaspersoft.html - https://cybersecurityworks.com/zerodays/cve-2018-18809-tibco.html
CVE ID: CVE-2018-18810 State: PUBLISHED Published: 2018-12-11T20:00:00Z Last Updated: 2024-09-17T01:32:00.588Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server Problem Types: The impact of this vulnerability includes the theoretical possibility that an authenticated user with specific kinds of privileges could view credentials used to access other services, when they should not be able to do so. Description: The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer
Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0, and TIBCO Managed File Transfer Internet Server: versions up to and including 7.3.2; 8.0.0; 8.0.1; 8.0.2; 8.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2018/12/tibco-s
eferences: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2018/12/tibco-security-advisory-december-11-2018-tibco-managed-file-transfer
CVE ID: CVE-2018-18811 State: REJECTED Published: 2020-01-15T17:44:33 Last Updated: 2020-01-15T17:44:33 Description: No description available.
CVE ID: CVE-2018-18812 State: PUBLISHED Published: 2019-01-16T22:00:00Z Last Updated: 2024-09-17T01:46:57.774Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server versions Problem Types: The impact of this vulnerability includes the theoretical possibility that a user with read-only access to the Spotfire Library can modify files stored in the Library. With that capability, among other possibilities, an attack could undermine the integrity of analysis results. Description: The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Plat
of analysis results. Description: The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when the Spotfire Library is configured to use external storage. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 10.0.0, and TIBCO Spotfire Server versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0. Additional Analyst Notes: - CVE Program Container: References: -
7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106635 - https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18812 - http://www.tibco.com/services/support/advisories
CVE ID: CVE-2018-18813 State: PUBLISHED Published: 2019-01-16T22:00:00Z Last Updated: 2024-09-17T00:51:13.618Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibility that an unauthenticated attacker could perform administrative functions provided by the web interface of the affected component. Description: The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities t
.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0; 10.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106635 - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-201
advisories - https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18813
CVE ID: CVE-2018-18814 State: PUBLISHED Published: 2019-01-16T22:00:00Z Last Updated: 2024-09-17T01:20:31.366Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibility that an unauthenticated attacker could gain administrative access to the web interface of the affected component. Description: The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling
IBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to gain full access to a target account, independent of configured authentication mechanisms. Affected releases are TIBCO Software Inc. TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.0.0, and TIBCO Spotfire Server: versions up to and including 7.10.1; 7.11.0; 7.11.1; 7.12.0; 7.13.0; 7.14.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106635 - http://www.tibco.com/services/support/advisories - https://www.tibco.com/supp
http://www.securityfocus.com/bid/106635 - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/01/tibco-security-advisory-january-16-2019-tibco-spotfire-2018-18814
CVE ID: CVE-2018-18815 State: PUBLISHED Published: 2019-03-07T22:00:00Z Last Updated: 2024-09-16T16:12:36.076Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS Problem Types: The impact of this vulnerability includes the theoretical possibility of unauthenticated read access to the contents of the host system, when combined with the vulnerability identified by CVE-2018-18809. Description: The REST API component of T
host system, when combined with the vulnerability identified by CVE-2018-18809. Description: The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability that theoretically allows unauthenticated users to bypass authorization checks for portions of the HTTP interface to the JasperReports Server. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to an
JasperReports Server: 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-server-2018-18815 - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/03/tibco-security
815 - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-library-2018-18809 - http://www.securityfocus.com/bid/107346 - https://www.zerodayinitiative.com/advisories/ZDI-19-305/
CVE ID: CVE-2018-18816 State: PUBLISHED Published: 2019-03-07T22:00:00Z Last Updated: 2024-09-16T17:58:45.349Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS Problem Types: The impact of this vulnerability includes the theoretical possibility that a malicious actor could gain full access to the web interface of the affected component. Description: The repository component of TIBCO Software Inc.'s TIBCO JasperReports Se
terface of the affected component. Description: The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross site scripting vulnerability. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft
including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi- Tenancy versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - http://www.securityfocus.com/bid/107348 - https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-2018-18816
CVE ID: CVE-2018-18817 State: PUBLISHED Published: 2018-10-30T01:00:00Z Last Updated: 2024-09-17T01:10:44.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the Leostream Agent API. Additional Analyst Notes: - CVE Program Container: References: - https://leostream.kayako.com/Knowledgebase/Article/View/85/52/leostream-agent-security-update
CVE ID: CVE-2018-18819 State: PUBLISHED Published: 2019-11-12T13:51:36 Last Updated: 2024-08-05T11:23:08.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP2 (8.0.2.202), and MiVoice Business Express versions 7.3 PR3 (7.3.1.302) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP1 (8.0.2.202), could allow creation of unauthorized chat sessions, due to insufficient access controls. A successful exploit could allow execution of arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/suppor
ion of arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0012
CVE ID: CVE-2018-18820 State: PUBLISHED Published: 2018-11-05T19:00:00 Last Updated: 2024-08-05T11:23:08.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042019 - https://security.gentoo.org/glsa/201811-09 - https://lists.debian.org/debian-lts-announce/2018/11/msg00033.html - http://www.o
//security.gentoo.org/glsa/201811-09 - https://lists.debian.org/debian-lts-announce/2018/11/msg00033.html - http://www.openwall.com/lists/oss-security/2018/11/01/3 - https://www.debian.org/security/2018/dsa-4333
CVE ID: CVE-2018-18822 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grapixel New Media v2.0 allows SQL Injection via the pages.aspx pageref parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45704/
CVE ID: CVE-2018-18823 State: PUBLISHED Published: 2019-04-25T19:45:48 Last Updated: 2024-08-05T11:23:08.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: WolfCMS 0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/in/subodh-kumar-8a00b1125/ - https://twitter.com/Subodhk62060242 - https://github.com/s-kustm - https://github.com/s-kustm/Subodh/blob/master/CVE-2018-18823.pdf
CVE ID: CVE-2018-18824 State: PUBLISHED Published: 2019-04-25T19:50:27 Last Updated: 2024-08-05T11:23:08.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/in/subodh-kumar-8a00b1125/ - https://twitter.com/Subodhk62060242 - https://github.com/s-kustm - https://github.com/s-kustm/Subodh/blob/master/CVE-2018-18824.pdf
CVE ID: CVE-2018-18825 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pagoda Linux panel V6.0 has XSS via the verification code associated with an invalid account login. A crafted code is mishandled during rendering of the login log. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/misterrou/rourou/blob/master/bt.docx
CVE ID: CVE-2018-18826 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists a heap-based buffer overflow in vc1_decode_p_mb_intfi in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1135
CVE ID: CVE-2018-18827 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists a heap-based buffer over-read in ff_vc1_pred_dc in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1135
CVE ID: CVE-2018-18828 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists a heap-based buffer overflow in vc1_decode_i_block_adv in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1135
CVE ID: CVE-2018-18829 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1136
CVE ID: CVE-2018-18830 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code with a .png filename, and then intercept the data packet. In the name parameter, change the suffix to jsp. In the response, the server returns the storage path of the file, which can be accessed to execute arbitrary JSP code. Additional Analyst Notes: - CVE Program Contain
e path of the file, which can be accessed to execute arbitrary JSP code. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mingSoft/MCMS/issues/IO0IQ
CVE ID: CVE-2018-18831 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mingSoft/MCMS/issues/IO0K0
CVE ID: CVE-2018-18832 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/DKCMS_9.4_sql_injection.doc - https://blog.whiterabbitxyj.com/cve/DKCMS_9.4_sql_injection.doc
CVE ID: CVE-2018-18834 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fouzhe/security/tree/master/libiec61850 - https://github.com/mz-automation/libiec61850/issues/81
CVE ID: CVE-2018-18835 State: PUBLISHED Published: 2018-10-30T06:00:00 Last Updated: 2024-08-05T11:23:08.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/65/