Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19217 State: PUBLISHED Published: 2018-11-12T19:00:00 Last Updated: 2024-08-05T11:30:04.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not reproduce for that version according to the maintainer or a reliable third-party Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1643753
CVE ID: CVE-2018-19218 State: PUBLISHED Published: 2018-11-12T19:00:00 Last Updated: 2024-08-05T11:30:04.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1643758
CVE ID: CVE-2018-19219 State: PUBLISHED Published: 2018-11-12T19:00:00 Last Updated: 2024-08-05T11:30:04.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1643760
CVE ID: CVE-2018-19220 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-16T19:09:18.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#getshell
CVE ID: CVE-2018-19221 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-16T18:18:52.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#sql-injection
CVE ID: CVE-2018-19222 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-16T18:13:50.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. It allows a /install/mysql_hy.php?riqi=0&i=0 attack to reset the admin password, even if install.txt exists. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#reset-admin-password
CVE ID: CVE-2018-19223 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-16T23:31:13.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. It allows XSS via the first input field to the admin/type.php?id=1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss2
CVE ID: CVE-2018-19224 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-16T20:58:08.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#unauthorized-access
CVE ID: CVE-2018-19225 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-17T02:52:17.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. admin/mima.php has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#csrf
CVE ID: CVE-2018-19226 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-17T03:32:47.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /data/0/admin.txt URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#info_exp
CVE ID: CVE-2018-19227 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-17T03:17:51.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/liuyan.php neirong[] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss1
CVE ID: CVE-2018-19228 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-17T02:57:17.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory traversal in the admin/pic.php del parameter, as demonstrated by deleting install/install.txt to permit a reinstallation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#del-file
CVE ID: CVE-2018-19229 State: PUBLISHED Published: 2018-11-12T20:00:00Z Last Updated: 2024-09-16T23:51:39.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss3
CVE ID: CVE-2018-19232 State: PUBLISHED Published: 2018-12-24T17:00:00 Last Updated: 2024-08-05T11:30:04.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to cause a denial of service via a FIRMWAREUPDATE GET request, as demonstrated by the /DOWN/FIRMWAREUPDATE/ROM1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-19232/poc-cve-2018-19232.py
CVE ID: CVE-2018-19233 State: PUBLISHED Published: 2018-12-20T17:00:00 Last Updated: 2024-08-05T11:30:04.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150427/Miss-Marple-Enterprise-Edition-File-Upload-Hardcoded-AES-Key.html - http://seclists.org/fulldisclosure/2018/Nov/55 - https://seclists.org/bugtraq/2018/Nov/37 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-
18/Nov/55 - https://seclists.org/bugtraq/2018/Nov/37 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-miss-marple-enterprise-edition/
CVE ID: CVE-2018-19234 State: PUBLISHED Published: 2018-12-20T17:00:00 Last Updated: 2024-08-05T11:30:04.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150427/Miss-Marple-Enterprise-Edition-File-Upload-Hardcoded-AES-Key.html - http://seclists.org/fulldisclosure/2018/Nov/55 - https://seclists.org/bugtraq/2018/Nov/37 - https://www.sec-consult.com/en/blog/advisories/multip
isclosure/2018/Nov/55 - https://seclists.org/bugtraq/2018/Nov/37 - https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-miss-marple-enterprise-edition/
CVE ID: CVE-2018-19239 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:30:04.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the timer binary, which allows remote attackers to execute arbitrary commands via three parameters (dhcpd_start, dhcpd_end, and lan_ipaddr) passed to the apply.cgi binary through a POST request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec
50693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/21
CVE ID: CVE-2018-19240 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:30:04.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (without authentication). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/21
CVE ID: CVE-2018-19241 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:30:04.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (without authentication). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/21
CVE ID: CVE-2018-19242 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:30:04.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32 and TEW-673GRU devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (with authentication). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/21
CVE ID: CVE-2018-19244 State: PUBLISHED Published: 2018-11-13T06:00:00 Last Updated: 2024-08-05T11:30:04.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XXE) vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "Charles Settings.xml" file from an attacker, an intranet network may be accessed and information may be leaked. Additional Analyst Notes: - CVE Program Container: References: - https://whitehatck01.blogspot.com/2018/11/charles-427-xml-external-entity.html
CVE ID: CVE-2018-19246 State: PUBLISHED Published: 2018-11-13T07:00:00 Last Updated: 2024-08-05T11:30:04.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45861/ - https://github.com/Athlon1600/php-p
- CVE Program Container: References: - https://www.exploit-db.com/exploits/45861/ - https://github.com/Athlon1600/php-proxy-app/issues/134
CVE ID: CVE-2018-19248 State: PUBLISHED Published: 2018-12-24T17:00:00 Last Updated: 2024-08-05T11:30:04.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to upload a firmware file and reset the printer without authentication by making a request to the /DOWN/FIRMWAREUPDATE/ROM1 URI and a POST request to the /FIRMWAREUPDATE URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-19248/poc-cve-2018-19248.py
CVE ID: CVE-2018-19249 State: PUBLISHED Published: 2019-01-03T22:00:00 Last Updated: 2024-08-05T11:30:04.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Stripe API v1 allows remote attackers to bypass intended access restrictions by replaying api.stripe.com /v1/tokens XMLHttpRequest data, parsing the response under the object card{}, and reading the cvc_check information if the creation is successful without charging the actual card used in the transaction. Additional Analyst Notes: - CVE Program Container: References: - https://fredmooredamian.blogspot.com/2019/01/improper-authentication-on-stripe-api-v1.html
CVE ID: CVE-2018-19250 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19251 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19252 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19253 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19254 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19255 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19256 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19257 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19258 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19259 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19260 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19261 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19262 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19263 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19264 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19265 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19266 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19267 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19268 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19269 State: REJECTED Published: 2019-01-08T20:00:00 Last Updated: 2019-01-08T19:57:01 Description: No description available.
CVE ID: CVE-2018-19270 State: REJECTED Published: 2018-11-14T11:00:00 Last Updated: 2018-11-14T16:57:01 Description: No description available.
CVE ID: CVE-2018-19271 State: PUBLISHED Published: 2018-11-14T11:00:00 Last Updated: 2024-08-05T11:30:04.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.28) allows SQL Injection via the main.php searchH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.rootlabs.com.br/authenticated-sql-injection-in-centreon-3-4-x/ - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html - https://github.com/centreon/centreon/pull/6625 - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.28.htm
on/pull/6625 - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.28.html
CVE ID: CVE-2018-19274 State: PUBLISHED Published: 2018-11-17T13:00:00 Last Updated: 2024-08-05T11:30:04.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has access to the Admin Control Panel with founder permissions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/phpbb3-phar-deserialization-to-remote-code-execution/ - https://www.phpbb.com/community/viewtopic.php?f=14&t=2492206 - https://lists.debian.org/debian-lts-announce/2018/11/msg00029.html
CVE ID: CVE-2018-19275 State: PUBLISHED Published: 2019-04-02T17:47:36 Last Updated: 2024-08-05T11:30:04.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/en-gb/support/security-advisories/mitel-product-security-advisory-19-0002 - https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-b
isories/mitel-product-security-advisory-19-0002 - https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-190002001-v10.pdf
CVE ID: CVE-2018-19276 State: PUBLISHED Published: 2019-03-17T21:30:20 Last Updated: 2024-08-05T11:30:04.048Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151553/OpenMRS-Platform-Insecure-Object-Deserialization.html - https://www.exploit-db.com/exploits/46327/ - http://packetstormsecurity.com/f
orm-Insecure-Object-Deserialization.html - https://www.exploit-db.com/exploits/46327/ - http://packetstormsecurity.com/files/155691/OpenMRS-Java-Deserialization-Remote-Code-Execution.html - https://know.bishopfox.com/advisories/news/2019/02/openmrs-insecure-object-deserialization - https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607
CVE ID: CVE-2018-19277 State: PUBLISHED Published: 2018-11-14T11:00:00 Last Updated: 2024-08-05T11:30:04.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPOffice/PhpSpreadsheet/issues/771 - https://www.bishopfox.com/news/2018/11/phpoffice-versions/ - https://github.com/MewesK/TwigSpreadsheetBundle/issues/18 - https://www.drupal.org/sa-contrib-2021-043
CVE ID: CVE-2018-19278 State: PUBLISHED Published: 2018-11-14T20:00:00Z Last Updated: 2024-09-16T17:39:00.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length. Additional Analyst Notes: - CVE Program Container: References: - https://downloads.asterisk.org/pub/security/AST-2018-010.html - https://issues.asterisk.org/jira/browse/ASTERISK-28127
CVE ID: CVE-2018-19279 State: PUBLISHED Published: 2018-11-14T20:00:00Z Last Updated: 2024-09-17T01:10:50.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files. On non-SSD devices, this is limited to a 5-second window and file sizes less than 600 bytes. The effect on SSD devices may be greater. Additional Analyst Notes: - CVE Program Container: References: - https://www.primx.eu/en/security-18a10338/
CVE ID: CVE-2018-19280 State: PUBLISHED Published: 2018-11-14T20:00:00 Last Updated: 2024-08-05T11:30:04.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon 3.4.x (fixed in Centreon 18.10.0) has XSS via the resource name or macro expression of a poller macro. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html - https://github.com/centreon/centreon/pull/6626
CVE ID: CVE-2018-19281 State: PUBLISHED Published: 2018-11-14T20:00:00 Last Updated: 2024-08-05T11:30:04.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.27) allows SNMP trap SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html - https://github.com/centreon/centreon/pull/6627 - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.27.html - https://github.com/centreon/centreon/pull/7069
CVE ID: CVE-2018-19282 State: PUBLISHED Published: 2019-04-04T20:31:36 Last Updated: 2024-08-05T11:30:04.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial Protocol (CIP) network stack. The vulnerability allows the attacker to crash the CIP in a way that it does not accept new connections, but keeps the current connections active, which can prevent legitimate users from recovering control. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-087-01 - https://applied-risk.com
- CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-087-01 - https://applied-risk.com/application/files/4215/5385/2294/Advisory_AR2019004_Rockwell_Powerflex_525_Denial_of_Service.pdf
CVE ID: CVE-2018-19284 State: REJECTED Published: 2020-03-02T19:41:37 Last Updated: 2020-03-02T19:41:37 Description: No description available.
CVE ID: CVE-2018-19286 State: PUBLISHED Published: 2018-11-15T05:00:00 Last Updated: 2024-08-05T11:30:04.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value (along with an arbitrary username value), and then creating and sharing a note. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CCCCCrash/POCs/blob/master/Web/mubu/xss.md