Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-18191 State: PUBLISHED Published: 2018-10-09T20:00:00Z Last Updated: 2024-09-16T23:52:05.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to change the administrator's password. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/49/
CVE ID: CVE-2018-18192 State: PUBLISHED Published: 2018-10-09T20:00:00Z Last Updated: 2024-09-16T20:26:45.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgig 4.1.0. There is a NULL pointer dereference in the function DLS::File::GetFirstSample() in DLS.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE ID: CVE-2018-18193 State: PUBLISHED Published: 2018-10-09T20:00:00Z Last Updated: 2024-09-17T03:47:48.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE ID: CVE-2018-18194 State: PUBLISHED Published: 2018-10-09T20:00:00Z Last Updated: 2024-09-16T22:25:40.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample() in DLS.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE ID: CVE-2018-18195 State: PUBLISHED Published: 2018-10-09T20:00:00 Last Updated: 2024-08-05T11:01:14.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgig 4.1.0. There is an FPE (divide-by-zero error) in DLS::Sample::Sample in DLS.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE ID: CVE-2018-18196 State: PUBLISHED Published: 2018-10-09T20:00:00Z Last Updated: 2024-09-16T22:50:54.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE ID: CVE-2018-18197 State: PUBLISHED Published: 2018-10-09T20:00:00Z Last Updated: 2024-09-17T01:12:09.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgig 4.1.0. There is an operator new[] failure (due to a big pSampleLoops heap request) in DLS::Sampler::Sampler in DLS.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE ID: CVE-2018-18198 State: PUBLISHED Published: 2018-10-09T22:00:00Z Last Updated: 2024-09-16T18:54:10.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The $opener_input_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to the page. The attacker can insert XSS payloads via an index.php?page=mediapool/media&opener_input_field=[XSS] request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redaxo/redaxo/releases/tag/5.6.4 - https://github.com/redaxo/redaxo4/issues/422
CVE ID: CVE-2018-18199 State: PUBLISHED Published: 2018-10-09T22:00:00Z Last Updated: 2024-09-17T03:03:47.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mediamanager in REDAXO before 5.6.4 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redaxo/redaxo/releases/tag/5.6.4
CVE ID: CVE-2018-18200 State: PUBLISHED Published: 2018-10-09T22:00:00Z Last Updated: 2024-09-17T00:06:31.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redaxo/redaxo/releases/tag/5.6.4
CVE ID: CVE-2018-18201 State: PUBLISHED Published: 2018-10-09T23:00:00 Last Updated: 2024-08-05T11:01:14.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yanchongchong/swallow/issues/2
CVE ID: CVE-2018-18202 State: PUBLISHED Published: 2018-10-10T01:00:00Z Last Updated: 2024-09-16T22:45:00.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QLogic 4Gb Fibre Channel 5.5.2.6.0 and 4/8Gb SAN 7.10.1.20.0 modules for IBM BladeCenter have an undocumented support account with a support password, an undocumented diags account with a diags password, and an undocumented prom account with a prom password. Additional Analyst Notes: - CVE Program Container: References: - http://misteralfa-hack.blogspot.com/2018/10/ibm-bladecenter-qlogic-4g-fibre-channel.html
CVE ID: CVE-2018-18203 State: PUBLISHED Published: 2018-11-28T23:00:00 Last Updated: 2024-08-05T11:01:14.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker (with physical access to the vehicle's USB ports) the ability to rewrite the firmware of the head unit. This occurs because the device accepts modified QNX6 filesystem images (as long as the attacker obtains access to certain Harman decryption/encryption code) as a consequence of a bug where unsigned images pass a validity check. An attacker could potentially install persistent malicious head unit firmware an
unsigned images pass a validity check. An attacker could potentially install persistent malicious head unit firmware and execute arbitrary code as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sgayou/subaru_starlink_research
CVE ID: CVE-2018-18205 State: PUBLISHED Published: 2019-03-15T20:00:00 Last Updated: 2024-08-05T11:01:14.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebContent/startup.tar.gz with userName=admin in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnvd.org.cn/flaw/show/1420913 - https://github.com/pudding2/CC8800-CMTS
CVE ID: CVE-2018-18206 State: PUBLISHED Published: 2018-10-10T09:00:00Z Last Updated: 2024-09-16T18:50:14.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Bytom/bytom/commit/1ac3c8ac4f2b1e1df9675228290bda6b9586ba42
CVE ID: CVE-2018-18207 State: PUBLISHED Published: 2018-10-10T15:00:00 Last Updated: 2024-08-05T11:01:14.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://0day.today/exploit/description/31282
CVE ID: CVE-2018-18208 State: PUBLISHED Published: 2018-10-10T15:00:00 Last Updated: 2024-08-05T11:01:14.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI. Additional Analyst Notes: - CVE Program Container: References: - https://0day.today/exploit/description/31282
CVE ID: CVE-2018-18209 State: PUBLISHED Published: 2018-10-10T16:00:00 Last Updated: 2024-08-05T11:01:14.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chekun/DiliCMS/issues/59
CVE ID: CVE-2018-18210 State: PUBLISHED Published: 2018-10-10T16:00:00 Last Updated: 2024-08-05T11:01:14.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chekun/DiliCMS/issues/59
CVE ID: CVE-2018-18211 State: PUBLISHED Published: 2018-10-10T16:00:00 Last Updated: 2024-08-05T11:01:14.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Pbootcms/Pbootcms/issues/1
CVE ID: CVE-2018-18215 State: PUBLISHED Published: 2018-10-11T15:00:00 Last Updated: 2024-08-05T11:01:14.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yanchongchong/swallow/issues/3
CVE ID: CVE-2018-18223 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T11:01:14.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105603 - https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.opendesign.com/security-advisories
CVE ID: CVE-2018-18224 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T11:01:14.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105603 - https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www
ecurityfocus.com/bid/105603 - https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.opendesign.com/security-advisories
CVE ID: CVE-2018-18225 State: PUBLISHED Published: 2018-10-12T05:00:00 Last Updated: 2024-08-05T11:01:14.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041909 - https://www.wireshark.org/security/wnpa-sec-2018-49.html - http://www.securityfocus.com/bid/105583 - https://www.debian.org/security/2018/dsa-4359 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172 - http://lists.opensuse.org/opensuse-security-a
018/dsa-4359 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15172 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b2bbd9fdf209911d94b23cc33f4daccbceb7fa8a
CVE ID: CVE-2018-18226 State: PUBLISHED Published: 2018-10-12T05:00:00 Last Updated: 2024-08-05T11:01:15.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041909 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15171 - http://www.securityfocus.com/bid/105583 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7 - ht
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e920ddc3cad2886ef07ca1a8e50e2a5c50986f7 - https://www.debian.org/security/2018/dsa-4359 - https://www.wireshark.org/security/wnpa-sec-2018-48.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-18227 State: PUBLISHED Published: 2018-10-12T05:00:00 Last Updated: 2024-08-05T11:01:15.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15119 - https://www.wireshark.org/security/wnpa-sec-2018-47.html - http://www.securitytracker.com/id/1041909 - http://www.securityfocus.com/bid/105583 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d443
- http://www.securityfocus.com/bid/105583 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d443be449a52f95df5754adc39e1f3472fec2f03 - https://www.debian.org/security/2018/dsa-4359 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-18240 State: PUBLISHED Published: 2018-10-11T07:00:00Z Last Updated: 2024-09-16T19:50:53.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pippo-java/pippo/issues/454
CVE ID: CVE-2018-18242 State: PUBLISHED Published: 2018-10-11T14:00:00 Last Updated: 2024-08-05T11:01:15.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yanchongchong/swallow/issues/4
CVE ID: CVE-2018-18244 State: PUBLISHED Published: 2019-01-03T20:00:00 Last Updated: 2024-08-05T11:01:14.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/vivotek-ip-camera-vulnerabilities-discovered-and-exploited-2e2531ecd244 - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-006-v1.pdf
CVE ID: CVE-2018-18245 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:01:14.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html - https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180026.txt - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html
CVE ID: CVE-2018-18246 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:01:14.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to enable the setup module. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180027.txt - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE ID: CVE-2018-18247 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:01:15.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180029.txt - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE ID: CVE-2018-18248 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:01:14.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180028.txt - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE ID: CVE-2018-18249 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:08:20.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=${PATH}_${APACHE_RUN_DIR}_${APACHE_RUN_USER} parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE ID: CVE-2018-18250 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:08:20.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE ID: CVE-2018-18251 State: PUBLISHED Published: 2019-04-24T20:13:06 Last Updated: 2024-08-05T11:08:20.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through a custom RPC over HTTP protocol. The Vision system relies on the client binary to enforce security rules and integrity of SQL statements and other content being sent to the server. Client HTTP calls can be manipulated by one of several means to execute arbitrary SQL statements (similar to SQLi) or possibly have unspecified other impact via this custom protocol. To perform these attacks an authenticated session is first required.
unspecified other impact via this custom protocol. To perform these attacks an authenticated session is first required. In some cases client calls are obfuscated by encryption, which can be bypassed due to hard-coded keys and an insecure key rotation protocol. Impacts may include remote code execution in some deployments; however, the vendor states that this cannot occur when the installation documentation is heeded. Additional Analyst Notes: - CVE Program Container: References: - https://www.vsecurity.com/resources/advisories.html
CVE ID: CVE-2018-18252 State: PUBLISHED Published: 2019-03-15T15:00:00 Last Updated: 2024-08-05T11:08:20.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access to unprivileged users via the --system option. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/cam1
CVE ID: CVE-2018-18253 State: PUBLISHED Published: 2019-03-15T15:00:00 Last Updated: 2024-08-05T11:08:20.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/cam1
CVE ID: CVE-2018-18254 State: PUBLISHED Published: 2019-03-15T15:00:00 Last Updated: 2024-08-05T11:08:20.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in the Custom App Launcher (CAL) database, and potentially gain privileges by placing a Trojan horse program at an app pathname. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/cam1
CVE ID: CVE-2018-18255 State: PUBLISHED Published: 2019-03-15T15:00:00 Last Updated: 2024-08-05T11:08:20.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe communicate with this server through named pipes. A user can initiate communication with the server by creating a named pipe and sending commands to achieve elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/cam1
CVE ID: CVE-2018-18256 State: PUBLISHED Published: 2019-03-15T15:00:00 Last Updated: 2024-08-05T11:08:20.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if they run any whitelisted application through the Custom App Launcher. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/cam1
CVE ID: CVE-2018-18257 State: PUBLISHED Published: 2018-10-11T20:00:00 Last Updated: 2024-08-05T11:08:20.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rakjong/vuln/blob/master/Bagecms_vuln_2.pdf
CVE ID: CVE-2018-18258 State: PUBLISHED Published: 2018-10-11T20:00:00 Last Updated: 2024-08-05T11:08:20.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rakjong/vuln/blob/master/Bagecms_vuln_1.pdf - https://kc.mcafee.com/corporate/index?page=content&id=SB10284