Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1000026 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM.. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://us
ional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - https://usn.ubuntu.com/3632-1/ - https://usn.ubuntu.com/3620-2/ - https://access.redhat.com/errata/RHSA-2018:2948 - https://patchwork.ozlabs.org/patch/859410/ - http://lists.openwall.net/netdev/2018/01/16/40 - https://usn.ubuntu.com/3617-2/ - http://lists.openwall.net/netdev/2018/01/18/96 - https://usn.ubuntu.com/3620-1/ - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/3619-1/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
CVE ID: CVE-2018-1000027 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:49.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later. Additional Analyst Notes: - CVE Program Container: References: - https:/
appears to have been fixed in 4.0.23 and later. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3557-1/ - http://www.squid-cache.org/Versions/v4/changesets/SQUID-2018_2.patch - https://www.debian.org/security/2018/dsa-4122 - http://www.squid-cache.org/Advisories/SQUID-2018_2.txt - https://lists.debian.org/debian-lts-announce/2018/02/msg00001.html - https://github.com/squid-cache/squid/pull/129/files - http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2018_2.patch - https://lists.debian.org/debian-lts-announce/2018/02/msg00002.html - https://usn.ubuntu.com/4059-2/
CVE ID: CVE-2018-1000028 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Control vulnerability in NFS server (nfsd) that can result in remote users reading or writing files they should not be able to via NFS. This attack appear to be exploitable via NFS server must export a filesystem with the "rootsquash" options enabled. This vulnerability appears to have been fixed in after commit 1995266727fa. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.or
xed in after commit 1995266727fa. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/linus/1995266727fa8143897e89b55f5d3c79aa828420
CVE ID: CVE-2018-1000029 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:49.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: mcholste Enterprise Log Search and Archive (ELSA) version revision 1205, commit 2cc17f1 and earlier contains a Cross Site Scripting (XSS) vulnerability in index view (/) that can result in . This attack appear to be exploitable via Payload delivered via the type, name, and value parameters of /Query/set_preference and the name and value parameters of /Query/preference. Payload executed when the user visits the index view (/). Additional Analyst Notes: - CVE Program Container: References: - http://blog.securityonion.net/2018
the index view (/). Additional Analyst Notes: - CVE Program Container: References: - http://blog.securityonion.net/2018/01/security-advisory-for-elsa.html
CVE ID: CVE-2018-1000030 State: PUBLISHED Published: 2018-02-08T17:00:00 Last Updated: 2024-08-05T12:33:48.874Z Severity: LOW (CVSS 3.6 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a
es there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3->Malloc->Thread1->Free's->Thread2-Re-uses-Free'd Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such
s function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1oyR9DAZjZK_SCn3mor6NRAYLJS6ueXaY/view - https://usn.ubuntu.com/3817-2/ - https://security.gentoo.org/glsa/201811-02 - https://www.dropbox.com/sh/sj3ee7xv55j36k7/AADwP-YfOYikBMuy32e0uvPFa?dl=0 - https://usn.ubuntu.com/3817-1/ - https://bugs.python.org/issue31530 - https://www.oracle.com/security-alerts/cpujan2020.html
CVE ID: CVE-2018-1000031 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html
CVE ID: CVE-2018-1000032 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:49.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html
CVE ID: CVE-2018-1000033 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:49.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html - http://www.securityfocus.com/bid/103031
CVE ID: CVE-2018-1000034 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html - http://www.securityfocus.com/bid/103111
CVE ID: CVE-2018-1000035 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00026.html - https://security.gentoo.org/glsa/202003-58
CVE ID: CVE-2018-1000036 State: PUBLISHED Published: 2018-05-24T13:00:00 Last Updated: 2024-09-13T16:11:02.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502 - https://security.gentoo.org/glsa/201811-15 - https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html - https://bugs.ghostscript.com/show_bug.cgi?id=698887 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.
g00013.html - https://bugs.ghostscript.com/show_bug.cgi?id=698887 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=8aa2bd34065d2844aae778bd4cc20c74bbcd9406
CVE ID: CVE-2018-1000037 State: PUBLISHED Published: 2018-05-24T13:00:00 Last Updated: 2024-08-05T12:33:48.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert crash) via a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-15 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=8a3257b01faa899dd9b5e35c6bb3403cd709c371%3Bhp=de39f005f12a1afc6973c1f5cec362d6545f70cb - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5511 - https://www.debian
39f005f12a1afc6973c1f5cec362d6545f70cb - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5511 - https://www.debian.org/security/2018/dsa-4334 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=b2e7d38e845c7d4922d05e6e41f3a2dc1bc1b14a%3Bhp=f51836b9732c38d945b87fda0770009a77ba680c - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5503 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5501 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=71ceebcf56e682504da22c4035b39a2d451e8ffd%3Bhp=7f82c01523505052615492f8e220f4348ba46995 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5490 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5564 - https://bu
.chromium.org/p/oss-fuzz/issues/detail?id=5490 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5564 - https://bugs.ghostscript.com/show_bug.cgi?id=698888 - https://bugs.ghostscript.com/show_bug.cgi?id=698882 - https://bugs.ghostscript.com/show_bug.cgi?id=698886 - https://bugs.ghostscript.com/show_bug.cgi?id=698890
CVE ID: CVE-2018-1000038 State: PUBLISHED Published: 2018-05-24T13:00:00 Last Updated: 2024-08-05T12:33:48.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-15 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=71ceebcf56e682504da22c4035b39a2d451e8ffd%3Bhp=7f82c01523505052615492f8e220f4348ba46995 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5494 - http://git.ghostscript.com/?
5052615492f8e220f4348ba46995 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5494 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=f597300439e62f5e921f0d7b1e880b5c1a1f1607%3Bhp=093fc3b098dc5fadef5d8ad4b225db9fb124758b - https://bugs.ghostscript.com/show_bug.cgi?id=698884
CVE ID: CVE-2018-1000039 State: PUBLISHED Published: 2018-05-24T13:00:00 Last Updated: 2024-08-05T12:33:48.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-15 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=4dcc6affe04368461310a21238f7e1871a752a05%3Bhp=8ec561d1bccc46e9db40a9f61310cd8b3763914e - http://git.ghostscript.com/?p=mupdf.git%3Ba=
8461310a21238f7e1871a752a05%3Bhp=8ec561d1bccc46e9db40a9f61310cd8b3763914e - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=71ceebcf56e682504da22c4035b39a2d451e8ffd%3Bhp=7f82c01523505052615492f8e220f4348ba46995 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5492 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5521 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5604 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=f597300439e62f5e921f0d7b1e880b5c1a1f1607%3Bhp=093fc3b098dc5fadef5d8ad4b225db9fb124758b - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5513 - https://bugs.ghostscript.com/show_bug.cgi?id=698883 - https://bugs.ghostscript.com/s
/p/oss-fuzz/issues/detail?id=5513 - https://bugs.ghostscript.com/show_bug.cgi?id=698883 - https://bugs.ghostscript.com/show_bug.cgi?id=698888 - https://bugs.ghostscript.com/show_bug.cgi?id=698891 - https://bugs.ghostscript.com/show_bug.cgi?id=698892 - https://bugs.ghostscript.com/show_bug.cgi?id=698901
CVE ID: CVE-2018-1000040 State: PUBLISHED Published: 2018-05-24T13:00:00 Last Updated: 2024-08-05T12:33:48.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-15 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600 - https://www.debian.org/security/2018/dsa-4334 - https://bugs.chromium
gs.chromium.org/p/oss-fuzz/issues/detail?id=5600 - https://www.debian.org/security/2018/dsa-4334 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=83d4dae44c71816c084a635550acc1a51529b881%3Bhp=f597300439e62f5e921f0d7b1e880b5c1a1f1607 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603 - https://bugs.ghostscript.com/show_bug.cgi?id=699086 - https://bugs.ghostscript.com/show_bug.cgi?id=698904 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=ace9e69017c08e1e4ce5912014177414c0382004
CVE ID: CVE-2018-1000041 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable via The victim must process a specially crafted SVG file containing an UNC path on Windows. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/librsvg/commit/f9d69eadd2b16b00d1a1f9f2861221
tes: - CVE Program Container: References: - https://github.com/ImageMagick/librsvg/commit/f9d69eadd2b16b00d1a1f9f286122123f8e547dd - https://github.com/GNOME/librsvg/commit/c6ddf2ed4d768fd88adbea2b63f575cd523022ea - https://lists.debian.org/debian-lts-announce/2018/02/msg00013.html
CVE ID: CVE-2018-1000042 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Security Onion Solutions Squert version 1.3.0 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in .inc/callback.php that can result in execution of OS Commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the data or obj parameters, used in autocat(). This vulnerability appears to have been fixed in 1.7.0. Additional Analyst Notes: - CVE Program Container: References: - http://blog.securit
ppears to have been fixed in 1.7.0. Additional Analyst Notes: - CVE Program Container: References: - http://blog.securityonion.net/2018/01/security-advisory-for-squert.html
CVE ID: CVE-2018-1000043 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Security Onion Solutions Squert version 1.0.1 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in .inc/callback.php that can result in execution of OS Commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the txdata parameter, used in tx()/transcript(), or the catdata parameter, used in cat(). This vulnerability appears to have been fixed in 1.7.0. Additional Analyst Notes: - CVE Program C
ameter, used in cat(). This vulnerability appears to have been fixed in 1.7.0. Additional Analyst Notes: - CVE Program Container: References: - http://blog.securityonion.net/2018/01/security-advisory-for-squert.html
CVE ID: CVE-2018-1000044 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:49.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). This vulnerability appears to have been fixed in 1.7.0. Additional Analyst Notes: - CVE Program Container: References: - http://blog.securityonion.net/2018/01/security-advisory-for-squert.html
CVE ID: CVE-2018-1000045 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library (Weather data) that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nasa/SingleDop/pull/19
CVE ID: CVE-2018-1000046 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nasa/PyBlock/pull/5
CVE ID: CVE-2018-1000047 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:49.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execution. This attack appear to be exploitable via Victim opens an untrusted file for optimization using Kodiak library. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nasa/Kodiak/issues/5
CVE ID: CVE-2018-1000048 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:49.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nasa/RtRetrievalFramework/issues/1
CVE ID: CVE-2018-1000049 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if the software is executed with read/write mode enabled. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/ReverseBrain/status/951850534985662464 - https://www.exploit-db.com/exploits/45044/ - https://www.exploit-db.com/exploits/44638/ - https://reversebrain.github.io/2018/02/01/Claymore-Dual-Miner-Remote-Code-Execution/ - http://www.
com/exploits/44638/ - https://reversebrain.github.io/2018/02/01/Claymore-Dual-Miner-Remote-Code-Execution/ - http://www.rapid7.com/db/modules/exploit/multi/misc/claymore_dual_miner_remote_manager_rce - http://packetstormsecurity.com/files/147678/Nanopool-Claymore-Dual-Miner-7.3-Remote-Code-Execution.html - http://packetstormsecurity.com/files/148578/Nanopool-Claymore-Dual-Miner-APIs-Remote-Code-Execution.html - https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2018/1000xxx/CVE-2018-1000049.json - https://reversebrain.github.io/2018/02/01/Claymore-Dual-Miner-Remote-Code-Execution
CVE ID: CVE-2018-1000050 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-08-05T12:33:48.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg Vorbis file. This vulnerability appears to have been fixed in 1.13. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/commit/244d83bc3d859293f55812d48b3db168e581f6ab
CVE ID: CVE-2018-1000051 State: PUBLISHED Published: 2018-02-09T23:00:00 Last Updated: 2024-09-11T15:53:13.232570 Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fz_keep_key_storable that can result in DOS / Possible code execution. This attack appear to be exploitable via Victim opens a specially crafted PDF. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-15 - https://www.debian.org/security/2018/dsa-4152 - https://bugs.ghostscript.com/show_bug.cgi?id=698873 - https://bugs.ghostscript.com/show_bug.cgi?id=698825 - https://cgit.ghostscript.com/cgi-bin/cg
m/show_bug.cgi?id=698873 - https://bugs.ghostscript.com/show_bug.cgi?id=698825 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=321ba1de287016b0036bf4a56ce774ad11763384