Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6881 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kongxin520/EmpireCMS/blob/master/EmpireCMS.md - https://kongxin.gitbook.io/empirecms/ - https://kongxin.gitbook.io/dedecms-5-7-bug/
CVE ID: CVE-2018-6882 State: PUBLISHED Published: 2018-03-27T16:00:00.000Z Last Updated: 2025-10-21T23:45:55.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2018/Mar/52 - https://www.securify.nl/advisory/SFY20180101/cross-site-scripting-vulnerability-in-zimbra-colla
disclosure/2018/Mar/52 - https://www.securify.nl/advisory/SFY20180101/cross-site-scripting-vulnerability-in-zimbra-collaboration-suite-due-to-the-way-it-handles-attachment-links.html - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.7 - https://bugzilla.zimbra.com/show_bug.cgi?id=108786 - http://www.securityfocus.com/archive/1/541891/100/0/threaded - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE ID: CVE-2018-6883 State: PUBLISHED Published: 2018-02-24T16:00:00 Last Updated: 2024-08-05T06:17:16.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/839 - https://pastebin.com/tPebQFy4
CVE ID: CVE-2018-6885 State: PUBLISHED Published: 2019-05-14T18:35:15 Last Updated: 2024-08-05T06:17:17.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MicroStrategy Web Services (the Microsoft Office plugin) before 10.4 Hotfix 7, and before 10.11. The vulnerability is unauthenticated and leads to access to the asset files with the MicroStrategy user privileges. (This includes the credentials to access the admin dashboard which may lead to RCE.) The path traversal is located in a SOAP request in the web service component. Additional Analyst Notes: - CVE Program Container: References: - https://community.microstrategy.com/s/article/Web-Services-Secur
l Analyst Notes: - CVE Program Container: References: - https://community.microstrategy.com/s/article/Web-Services-Security-Vulnerability
CVE ID: CVE-2018-6888 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cross Site Request forgery: using a forged HTTP request, a malicious user can lead a user to unknowingly create / delete or modify a user account due to the lack of an anti-CSRF token. Additional Analyst Notes: - CVE Program Container: References: - https://securitywarrior9.blogspot.in/2018/02/cross-site-request-forgery-type-setter.html - https://www.exploit-db.com/exploits/44029/
CVE ID: CVE-2018-6889 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a malicious user can poison the web cache or perform advanced password reset attacks or even trigger arbitrary user re-direction. Additional Analyst Notes: - CVE Program Container: References: - https://securitywarrior9.blogspot.in/2018/02/host-header-injection-type-setter-cms-51.html - https://www.exploit-db.com/exploits/44028/
CVE ID: CVE-2018-6890 State: PUBLISHED Published: 2018-02-22T19:00:00 Last Updated: 2024-08-05T06:17:16.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pradeepjairamani/WolfCMS-XSS-POC/blob/master/Wolfcms%20v0.8.3.1%20xss%20POC%20by%20Pradeep%20Jairamani.pdf - https://github.com/pradeepjairamani/WolfCMS-XSS-POC
CVE ID: CVE-2018-6891 State: PUBLISHED Published: 2018-02-11T06:00:00Z Last Updated: 2024-09-17T00:52:17.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bookly-responsive-appointment-booking-tool/#developers - https://www.gubello.me/blog/bookly-blind-stored-xss/
CVE ID: CVE-2018-6892 State: PUBLISHED Published: 2018-02-11T18:00:00 Last Updated: 2024-08-05T06:17:16.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44175/ - https://blogs.securiteam.com/index.php/archives/3669 - http://hyp3rlinx.alterv
ps://www.exploit-db.com/exploits/44175/ - https://blogs.securiteam.com/index.php/archives/3669 - http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txt - https://www.exploit-db.com/exploits/46250/ - https://www.exploit-db.com/exploits/45197/ - https://www.exploit-db.com/exploits/44027/ - http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html - http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html - http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html - https://www.exploit-db.com/exploits/48840
CVE ID: CVE-2018-6893 State: PUBLISHED Published: 2018-02-12T14:00:00 Last Updated: 2024-08-05T06:17:16.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter 'module' with a SQL statement, lacks effective filtering. Additional Analyst Notes: - CVE Program Container: References: - https://xianzhi.aliyun.com/forum/topic/2050
CVE ID: CVE-2018-6900 State: PUBLISHED Published: 2018-04-12T22:00:00 Last Updated: 2024-08-05T06:17:17.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/12/website-broker-script-stored-xss/
CVE ID: CVE-2018-6902 State: PUBLISHED Published: 2018-04-12T22:00:00 Last Updated: 2024-08-05T06:17:16.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/12/image-sharing-script-stored-xss/
CVE ID: CVE-2018-6903 State: PUBLISHED Published: 2018-04-12T22:00:00 Last Updated: 2024-08-05T06:17:16.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/12/hot-scripts-clone-script-classified-improper-validation-of-email-address/
CVE ID: CVE-2018-6904 State: PUBLISHED Published: 2018-04-12T22:00:00 Last Updated: 2024-08-05T06:17:16.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/12/car-rental-script-stored-xss/
CVE ID: CVE-2018-6905 State: PUBLISHED Published: 2018-04-08T17:00:00 Last Updated: 2024-08-05T06:17:17.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process. Additional Analyst Notes: - CVE Program Container: References: - https://forge.typo3.org/issues/84191 - http://www.securitytracker.com/id/1040755 - https://github.com/pradeepjairamani/TYPO3-XSS-POC
CVE ID: CVE-2018-6906 State: PUBLISHED Published: 2018-11-01T17:00:00 Last Updated: 2024-08-05T06:17:17.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API. Additional Analyst Notes: - CVE Program Container: References: - http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE ID: CVE-2018-6907 State: PUBLISHED Published: 2018-11-01T17:00:00 Last Updated: 2024-08-05T06:17:17.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API. Additional Analyst Notes: - CVE Program Container: References: - http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE ID: CVE-2018-6908 State: PUBLISHED Published: 2018-11-01T17:00:00 Last Updated: 2024-08-05T06:17:16.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the device via a 127.0.0.1:port value in the HTTP 'Host' header, as demonstrated by retrieving credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE ID: CVE-2018-6909 State: PUBLISHED Published: 2018-11-01T17:00:00 Last Updated: 2024-08-05T06:17:17.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page request. Additional Analyst Notes: - CVE Program Container: References: - http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE ID: CVE-2018-6910 State: PUBLISHED Published: 2018-02-13T21:00:00 Last Updated: 2024-08-05T06:17:16.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kongxin520/DedeCMS/blob/master/DedeCMS_5.7_Bug.md - https://kongxin.gitbook.io/dedecms-5-7-bug/
CVE ID: CVE-2018-6911 State: PUBLISHED Published: 2018-02-13T14:00:00 Last Updated: 2024-08-05T06:17:17.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44031/
CVE ID: CVE-2018-6912 State: PUBLISHED Published: 2018-02-12T02:00:00 Last Updated: 2024-08-05T06:17:17.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file. Additional Analyst Notes: - CVE Program Container: References: - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/76cc0f0f673353cd4746cd3b83838ae335e5d9ed - https://security.gentoo.org/glsa/202003-65
CVE ID: CVE-2018-6913 State: PUBLISHED Published: 2018-04-17T20:00:00 Last Updated: 2024-08-05T06:17:17.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3625-2/ - http://www.securityfocus.com/bid/103953 - https://lists.debian.org/debian-lts-announce/2018/04/msg00009.html - http://www.securitytracker.com/id/1040681 - https://usn.ubuntu.com/3625-1/ - https://www.debian.org/security/2018/dsa-4172 - https://security.gentoo.org/glsa/201909-01
s://usn.ubuntu.com/3625-1/ - https://www.debian.org/security/2018/dsa-4172 - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpujul2020.html - https://rt.perl.org/Public/Bug/Display.html?id=131844
CVE ID: CVE-2018-6914 State: PUBLISHED Published: 2018-04-03T22:00:00 Last Updated: 2024-08-05T06:17:17.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. (dot dot) in the prefix argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-released/ - https://access.redhat.com/errata/RHSA-2018:3729 - https://usn.ubuntu.com/3626-1/ - http://www.securitytracke
released/ - https://access.redhat.com/errata/RHSA-2018:3729 - https://usn.ubuntu.com/3626-1/ - http://www.securitytracker.com/id/1042004 - http://www.securityfocus.com/bid/103686 - https://access.redhat.com/errata/RHSA-2018:3730 - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html - https://access.redhat.com/errata/RHSA-2018:3731 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-3-7-released/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://www.ruby-lang.org/en/news/2018/03/28/unintentional-file-and-directory-creation-with-directory-traversal-cve-2018-6914/ - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debi
irectory-traversal-cve-2018-6914/ - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ - https://www.debian.org/security/2018/dsa-4259 - https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-released/ - https://lists.debian.org/debian-lts-announce/2018/04/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html - https://access.redhat.com/errata/RHSA-2019:2028
CVE ID: CVE-2018-6916 State: PUBLISHED Published: 2018-03-09T15:00:00Z Last Updated: 2024-09-17T02:21:59.132Z Vendors: FreeBSD Products: FreeBSD Problem Types: Improper validation Description: In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use-after-free vulnerability exists in the IPsec AH handling code. This issue could cause a system crash or other unpredictable results. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040460 - https://www.freebsd.org/security/advisories/FreeBSD-SA-18:01.ipse
erences: - http://www.securitytracker.com/id/1040460 - https://www.freebsd.org/security/advisories/FreeBSD-SA-18:01.ipsec.asc
CVE ID: CVE-2018-6917 State: PUBLISHED Published: 2018-04-04T14:00:00Z Last Updated: 2024-09-17T01:51:49.786Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel memory disclosure Description: In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading to the use of arbitrary kernel memory as glyph data. Unprivileged users may be able to access privileged kernel data. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-18:04.vt.asc - http://www.securityfocus.com/bid/103668 - http://www.s
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:04.vt.asc - http://www.securityfocus.com/bid/103668 - http://www.securitytracker.com/id/1040629
CVE ID: CVE-2018-6918 State: PUBLISHED Published: 2018-04-04T14:00:00Z Last Updated: 2024-09-17T02:12:06.548Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel crash or denial of service Description: In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able to send an arbitrary packet to cause the machine to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040628 - https://security.FreeBSD.org
t Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040628 - https://security.FreeBSD.org/advisories/FreeBSD-SA-18:05.ipsec.asc - http://www.securityfocus.com/bid/103666 - https://support.apple.com/kb/HT210090 - https://seclists.org/bugtraq/2019/May/77 - http://seclists.org/fulldisclosure/2019/Jun/6 - https://support.apple.com/kb/HT210091
CVE ID: CVE-2018-6919 State: PUBLISHED Published: 2018-04-04T14:00:00Z Last Updated: 2024-09-17T01:21:29.786Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel memory disclosure Description: In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access small amounts privileged kernel data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103760 - https://security.FreeBSD.org/advisories/FreeBSD-EN-18:04.mem.asc
CVE ID: CVE-2018-6920 State: PUBLISHED Published: 2018-05-08T19:00:00Z Last Updated: 2024-09-16T16:17:45.027Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel memory disclosure Description: In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux subsystem and Atheros wireless driver, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of privileged kernel data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104114 - https
l data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104114 - https://security.FreeBSD.org/advisories/FreeBSD-EN-18:05.mem.asc
CVE ID: CVE-2018-6921 State: PUBLISHED Published: 2018-05-08T19:00:00Z Last Updated: 2024-09-17T02:02:12.617Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel memory disclosure Description: In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of privileged kernel data. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-EN-18:05.mem.asc - http://www.securityfocus.com/bid/104118
CVE ID: CVE-2018-6922 State: PUBLISHED Published: 2018-08-09T18:00:00Z Last Updated: 2024-09-16T17:53:10.816Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-400 Description: One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses an inefficient algorithm to reassemble the data. This causes the CPU time spent on segment processing to grow linearly with the number of segments in the reassembly queue. An attacker who has the ability to send TCP traffic to a victim system can degrade the victim system's network performance and/or consume excessive CPU by exploiting the inefficiency of TCP reassembl
ade the victim system's network performance and/or consume excessive CPU by exploiting the inefficiency of TCP reassembly handling, with relatively small bandwidth cost. Additional Analyst Notes: - CVE Program Container: References: - https://www.freebsd.org/security/advisories/FreeBSD-SA-18:08.tcp.asc - http://www.securitytracker.com/id/1041425 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - http://www.securityfocus.com/bid/105058 - https://security.netapp.com/advisory/ntap-20180815-0002/
CVE ID: CVE-2018-6923 State: PUBLISHED Published: 2018-09-04T18:00:00Z Last Updated: 2024-09-16T23:16:08.596Z Vendors: FreeBSD Products: FreeBSD Problem Types: Denial of service Description: In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption. This issue can allow a remote attacker who is able to send an arbitrary ip fragments to cause the machine to consume excessive resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105336 - http://www.securitytracker.com/id/1041505 - https://www.freebsd.org/security/advisories
w.securityfocus.com/bid/105336 - http://www.securitytracker.com/id/1041505 - https://www.freebsd.org/security/advisories/FreeBSD-SA-18:10.ip.asc
CVE ID: CVE-2018-6924 State: PUBLISHED Published: 2018-09-12T15:00:00Z Last Updated: 2024-09-16T19:30:37.231Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel memory disclosure Description: In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041646 - https://security.freebsd.org/advisories/FreeBSD-SA-18:12.elf.asc
CVE ID: CVE-2018-6925 State: PUBLISHED Published: 2018-09-28T13:00:00Z Last Updated: 2024-09-17T00:26:16.671Z Vendors: FreeBSD Products: FreeBSD Problem Types: Denial of service Description: In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block flags through various failure paths, an unprivileged authenticated local user may be able to cause a NULL pointer dereference causing the kernel to crash. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-EN-18:11.listen.asc - https://www.flexera.com/company/secunia-r