Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1), SICAM PQ Analyzer (All versions < V3.11), SICAM SCC (All versions < V9.02 HF3). A service of the affected products listening on all of the host's network interfaces on either port 4884/TCP, 5885/TCP, or port 5886/TCP could allow an attacker to either exfiltrate limited data from the system or to execute code with Microsoft Windows user permissions. Successful exploitation requires an attacker to be able to send a specially crafted network request to the vulnerable service and a user interacting with the service's client application on the host. In order to execute arbitrary code with Microsoft Windows user permissions, an attacker must be able to plant the code in advance on the host by
rary code with Microsoft Windows user permissions, an attacker must be able to plant the code in advance on the host by other means. The vulnerability has limited impact to confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-159860.pdf - http://www.securityfocus.com/bid/105933 - https://ics-cert.us-cert.gov/advisories/ICSA-18-317-01
CVE ID: CVE-2018-4859 State: PUBLISHED Published: 2018-06-26T18:00:00Z Last Updated: 2024-09-17T00:31:04.082Z Vendors: Siemens AG Products: SCALANCE M875 Problem Types: CWE-78 Description: A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device. At the time of advisory publication no pub
ulnerability could allow an attacker to execute arbitrary code on the device. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf
CVE ID: CVE-2018-4860 State: PUBLISHED Published: 2018-06-26T18:00:00Z Last Updated: 2024-09-16T19:45:42.991Z Vendors: Siemens AG Products: SCALANCE M875 Problem Types: CWE-78 Description: A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device. At the time of advisory publication no pub
CVE ID: CVE-2018-4861 State: PUBLISHED Published: 2018-06-26T18:00:00Z Last Updated: 2024-09-16T20:32:36.920Z Vendors: Siemens AG Products: SCALANCE M875 Problem Types: CWE-22 Description: A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could potentially read and download arbitrary files from the device's file system. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was
he security vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf
CVE ID: CVE-2018-4862 State: PUBLISHED Published: 2018-01-03T09:00:00 Last Updated: 2024-08-05T05:18:26.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy versions 3.2.11 - 4.1.5 (fixed in 4.1.6), an authenticated user with ProcessEdit permission could reference an Azure account in such a way as to bypass the scoping restrictions, resulting in a potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/4134
CVE ID: CVE-2018-4863 State: PUBLISHED Published: 2018-04-05T17:00:00 Last Updated: 2024-08-05T05:18:26.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44410/ - http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-v10.7-TAMPER-PROTECTION-BYPASS-CVE-2018-4863.txt - http://seclists.org/fulldisclosure/2018/Apr/6
CVE ID: CVE-2018-4868 State: PUBLISHED Published: 2018-01-03T09:00:00 Last Updated: 2024-08-05T05:18:27.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/202 - http://www.securityfocus.com/bid/102477
CVE ID: CVE-2018-4871 State: PUBLISHED Published: 2018-01-09T21:00:00 Last Updated: 2024-08-05T05:18:26.579Z Vendors: n/a Products: Adobe Flash Player before 28.0.0.137 Problem Types: Out-of-bounds Read Description: An Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This vulnerability occurs because of computation that reads data that is past the end of the target buffer. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/fl
exposure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/flash-player/apsb18-01.html - https://access.redhat.com/errata/RHSA-2018:0081 - http://www.securityfocus.com/bid/102465 - http://www.securitytracker.com/id/1040155
CVE ID: CVE-2018-4872 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.807Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Security bypass Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is a security bypass vulnerability that leads to a sandbox escape. Specifically, the vulnerability exists in the way a cross call is handled. Additional Analyst Notes: - CVE Program Container: References: - https://
ity exists in the way a cross call is handled. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securityfocus.com/bid/102993 - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4873 State: PUBLISHED Published: 2018-05-19T17:00:00 Last Updated: 2024-08-05T05:18:26.967Z Vendors: n/a Products: Creative Cloud Desktop Application 4.4.1.298 and earlier versions Problem Types: Unquoted Search Path Description: Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104103 - http://www.securitytracker.com/id/1040860 - https://helpx.adobe.com/security/products/creative-cloud/apsb18-12.html
CVE ID: CVE-2018-4874 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-4875 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.675Z Vendors: n/a Products: Adobe Experience Manager 6.1, 6.0 Problem Types: Reflected cross-site scripting Description: Adobe Experience Manager versions 6.1 and 6.0 are vulnerable to a reflected cross-site scripting vulnerability related to the handling of malicious content embedded in image files uploaded to the DAM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102991 - https://helpx.adobe.com/security/products/experience-manager/apsb18-04.html - http://www.securitytracker.com/id/1040365
CVE ID: CVE-2018-4876 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.648Z Vendors: n/a Products: Adobe Experience Manager 6.3, 6.2, 6.1 Problem Types: Cross-site scripting Description: Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb18-04.html - http://www.securitytracker.com/id/1040365 - http://www.securityfocus.com/bid/102990
CVE ID: CVE-2018-4877 State: PUBLISHED Published: 2018-02-06T20:00:00 Last Updated: 2024-08-05T05:18:26.666Z Vendors: n/a Products: Adobe Flash Player before 28.0.0.161 Problem Types: use-after-free Description: A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/flash-player/apsb18-03.html - https://access.redhat.com/errata/RHSA-2018:0285 - http://www.securityfocu
ecurity/products/flash-player/apsb18-03.html - https://access.redhat.com/errata/RHSA-2018:0285 - http://www.securityfocus.com/bid/102930
CVE ID: CVE-2018-4878 State: PUBLISHED Published: 2018-02-06T20:00:00.000Z Last Updated: 2025-11-17T19:33:19.689Z Vendors: n/a Products: Adobe Flash Player before 28.0.0.161 Problem Types: use-after-free Description: A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blog.talosintelligence.com/2018/02/group-123-goes-wil
E Program Container: - CISA ADP Vulnrichment: References: - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html - https://threatpost.com/adobe-flash-player-zero-day-spotted-in-the-wild/129742/ - https://helpx.adobe.com/security/products/flash-player/apsb18-03.html - https://access.redhat.com/errata/RHSA-2018:0285 - http://www.securitytracker.com/id/1040318 - http://www.securityfocus.com/bid/102893 - https://www.fireeye.com/blog/threat-research/2018/02/attacks-leveraging-adobe-zero-day.html - https://blog.morphisec.com/flash-exploit-cve-2018-4878-spotted-in-the-wild-massive-malspam-campaign - https://www.darkreading.com/threat-intelligence/adobe-flash-vulnerability-reappears-in
e-wild-massive-malspam-campaign - https://www.darkreading.com/threat-intelligence/adobe-flash-vulnerability-reappears-in-malicious-word-files/d/d-id/1331139 - https://github.com/InQuest/malware-samples/tree/master/CVE-2018-4878-Adobe-Flash-DRM-UAF-0day - https://www.trendmicro.com/vinfo/us/security/news/vulnerabilities-and-exploits/north-korean-hackers-allegedly-exploit-adobe-flash-player-vulnerability-cve-2018-4878-against-south-korean-targets - https://github.com/vysec/CVE-2018-4878 - https://securingtomorrow.mcafee.com/mcafee-labs/hackers-bypassed-adobe-flash-protection-mechanism/ - https://www.exploit-db.com/exploits/44412/
CVE ID: CVE-2018-4879 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.645Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds write Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image conversion module that processes Enhanced Metafile Format Plus (EMF+) data. An attacker can
tation is part of the image conversion module that processes Enhanced Metafile Format Plus (EMF+) data. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364 - http://www.securityfocus.com/bid/102994
CVE ID: CVE-2018-4880 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.518Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the conversion module that reads U3D data. A successful attack can lead to sensitive data ex
the computation is part of the conversion module that reads U3D data. A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102996 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4881 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.630Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that reads bitmap image file (BMP) data. A successful attack can
the computation is part of the image conversion module that reads bitmap image file (BMP) data. A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102996 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4882 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.661Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the string literal parser. A successful attack can lead to sensitive data exposure. Addition
the computation is part of the string literal parser. A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102996 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4883 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:27.003Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs because of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion engine that handles Enhanced Metafile Format (EMF). A successful attack can
computation is part of the image conversion engine that handles Enhanced Metafile Format (EMF). A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102996 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4884 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.974Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion engine when processing Enhanced Metafile Format (EMF) data that embeds
the computation is part of the image conversion engine when processing Enhanced Metafile Format (EMF) data that embeds an image in the bitmap (BMP) file format. A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102996 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4885 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.680Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of Enhanced Metafile Format processing engine (within the image conversion module). A successfu
the computation is part of Enhanced Metafile Format processing engine (within the image conversion module). A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102996 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4886 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.932Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation occurs in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to ha
the computation occurs in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to handling of bitmap rectangles. A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102996 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4887 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.953Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the Unicode mapping module that is invoked when processing Enhanced Metafile Format (EMF) da
the computation is part of the Unicode mapping module that is invoked when processing Enhanced Metafile Format (EMF) data (during image conversion). A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102996 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4888 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.499Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Use After Free Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability. The vulnerability is triggered by a crafted PDF file that can cause a memory access violation exception in the XFA engine because of a dangling reference left as a co
F file that can cause a memory access violation exception in the XFA engine because of a dangling reference left as a consequence of freeing an object in the computation that manipulates internal nodes in a graph representation of a document object model used in XFA. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102995 - https://helpx.adobe.com/security/products/acrobat/apsb18-02.html - http://www.securitytracker.com/id/1040364
CVE ID: CVE-2018-4889 State: PUBLISHED Published: 2018-02-27T05:00:00 Last Updated: 2024-08-05T05:18:26.642Z Vendors: n/a Products: Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Problem Types: Out-of-bounds read Description: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the XPS image conversion. A successful attack can lead to sensitive data exposure. Additiona