Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ttp://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.f5.com/csp/article/K51512510?utm_source=f
.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.f5.com/csp/article/K51512510?utm_source=f5support&amp%3Butm_medium=RSS - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-14880 State: PUBLISHED Published: 2019-10-03T15:35:06 Last Updated: 2024-08-05T09:46:23.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://github.com/the-tcpdump-group/tcpdump/commit/e01c9bf76740802025c9328901b55ee4a0c49ed6 - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announ
lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://support.f5.com/csp/article/K56551263?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY
medium=RSS - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-14881 State: PUBLISHED Published: 2019-10-03T15:36:44 Last Updated: 2024-08-05T09:46:23.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://github.com/the-tcpdump-group/tcpdump/commit/86326e880d31b328a151d45348c35220baa9a1ff - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/op
sg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - h
announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-14882 State: PUBLISHED Published: 2019-10-03T15:41:37 Last Updated: 2024-08-05T09:46:23.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://github.com/the-tcpdump-group/tcpdump/commit/d7505276842e85bfd067fa21cdb32b8a2dc3c5e4 - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.
pensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html - https://seclists.org/bugtraq/2019/Oct/28 - https://www.debian.org/security/2019/dsa-4547 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 -
/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26 - https://security.netapp.com/advisory/ntap-20200120-0001/ - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/
CVE ID: CVE-2018-14883 State: PUBLISHED Published: 2018-08-03T13:00:00 Last Updated: 2024-08-05T09:46:23.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104871 - https://security.netapp.com/advisory/ntap-20181107-0003/ - https://usn.ubuntu.com/3766-1/ - https://www.tenable.com/security/tns-2018-12 - https://www.debian.org/security/2018/dsa-4353 - http://php.net/ChangeLog-5.ph
s://www.tenable.com/security/tns-2018-12 - https://www.debian.org/security/2018/dsa-4353 - http://php.net/ChangeLog-5.php - https://lists.debian.org/debian-lts-announce/2018/09/msg00000.html - https://bugs.php.net/bug.php?id=76423 - https://usn.ubuntu.com/3766-2/ - http://php.net/ChangeLog-7.php
CVE ID: CVE-2018-14884 State: PUBLISHED Published: 2018-08-03T13:00:00 Last Updated: 2024-08-05T09:46:23.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because http_header_value in ext/standard/http_fopen_wrapper.c can be a NULL value that is mishandled in an atoi call. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181107-0003/ - https://bugs.php.net/bug.php?id=75535 - http://php.net/ChangeLog-7.php - https://access.redhat.com/errata/RHSA-2019:2519
CVE ID: CVE-2018-14885 State: PUBLISHED Published: 2019-06-28T17:35:21 Last Updated: 2024-08-05T09:46:23.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/commits/master - https://github.com/odoo/odoo/issues/32512
CVE ID: CVE-2018-14886 State: PUBLISHED Published: 2019-06-28T17:27:55 Last Updated: 2024-08-05T09:46:23.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file inclusion, which allows privileged authenticated users to read local files via a crafted module description. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/commits/master - https://github.com/odoo/odoo/issues/32513
CVE ID: CVE-2018-14887 State: PUBLISHED Published: 2019-06-28T17:26:42 Last Updated: 2024-08-05T09:46:23.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/commits/master - https://github.com/odoo/odoo/issues/32511
CVE ID: CVE-2018-14888 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T09:46:23.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/148871/MyBB-Thank-You-Like-3.0.0-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/45178/ - https://community.mybb.com/mods.php?action=changelog&pid=360 - https://github.com/mybbgroup/MyBB_Thank-you-like-plugin/pull/199
CVE ID: CVE-2018-14889 State: PUBLISHED Published: 2018-09-21T21:00:00 Last Updated: 2024-08-05T09:46:24.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vectra.ai/security-advisories
CVE ID: CVE-2018-14890 State: PUBLISHED Published: 2018-09-21T21:00:00 Last Updated: 2024-08-05T09:46:24.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console. Additional Analyst Notes: - CVE Program Container: References: - https://vectra.ai/security-advisories
CVE ID: CVE-2018-14891 State: PUBLISHED Published: 2018-09-21T21:00:00 Last Updated: 2024-08-05T09:46:25.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vectra.ai/security-advisories
CVE ID: CVE-2018-14892 State: PUBLISHED Published: 2018-11-27T21:00:00 Last Updated: 2024-08-05T09:46:24.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/ise-labs-finds-vulnerabilities-in-zyxel-nsa325-945481a699b8
CVE ID: CVE-2018-14893 State: PUBLISHED Published: 2018-11-27T21:00:00 Last Updated: 2024-08-05T09:46:23.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: A system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows attackers to execute system commands via the web application API. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/ise-labs-finds-vulnerabilities-in-zyxel-nsa325-945481a699b8
CVE ID: CVE-2018-14894 State: PUBLISHED Published: 2019-04-09T17:27:16 Last Updated: 2024-08-05T09:46:24.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=B0VpK0poTco - https://mustafakemalcan.com/cyberark-epm-file-block-bypass-cve-2018-14894/ - https://www.exploit-db.com/exploits/46688/ - http://packetstormsecurity.com/files/152489/CyberArk-EPM-10.2.1.603-Security-Restrictions-Bypass.html
CVE ID: CVE-2018-14899 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:46:24.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites. Additional Analyst Notes: - CVE Program Container: References: - https://www.vdalabs.com/2018/08/26/epson-printer-vulnerabilities/
CVE ID: CVE-2018-14900 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:46:24.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100. Additional Analyst Notes: - CVE Program Container: References: - https://www.vdalabs.com/2018/08/26/epson-printer-vulnerabilities/
CVE ID: CVE-2018-14901 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:46:24.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services. Additional Analyst Notes: - CVE Program Container: References: - https://www.vdalabs.com/2018/08/26/epson-printer-vulnerabilities/
CVE ID: CVE-2018-14902 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:46:24.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict data access. This allows an attacker's application to read scanned documents. Additional Analyst Notes: - CVE Program Container: References: - https://www.vdalabs.com/2018/08/26/epson-printer-vulnerabilities/
CVE ID: CVE-2018-14903 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:46:24.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates, which allows remote attackers to cause a printer malfunction or send malicious data to the printer. Additional Analyst Notes: - CVE Program Container: References: - https://www.vdalabs.com/2018/08/26/epson-printer-vulnerabilities/
CVE ID: CVE-2018-14904 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T09:46:25.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-samsung-syncthru-web-service-cc86467d2df
CVE ID: CVE-2018-14905 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T09:46:24.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79
CVE ID: CVE-2018-14906 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T09:46:24.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79
CVE ID: CVE-2018-14907 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T09:46:24.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79
CVE ID: CVE-2018-14908 State: PUBLISHED Published: 2018-08-03T18:00:00 Last Updated: 2024-08-05T09:46:24.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-samsung-syncthru-web-service-cc86467d2df
CVE ID: CVE-2018-14910 State: PUBLISHED Published: 2018-08-03T19:00:00 Last Updated: 2024-08-05T09:46:24.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php (aka /adm1n/admin_ip.php). The code is executed by visiting adm1n/admin_ip.php or data/admin/ip.php. This can also be exploited through CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MichaelWayneLIU/seacms/blob/master/seacms2.md
CVE ID: CVE-2018-14911 State: PUBLISHED Published: 2018-08-03T19:00:00Z Last Updated: 2024-09-17T03:54:20.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by composing a request for a .txt upload and then changing it to a .php upload. The attacker must have admin access to change the upload_file_ext (aka "Allow upload file suffix") setting, and must use "php,php" in this setting to bypass t
change the upload_file_ext (aka "Allow upload file suffix") setting, and must use "php,php" in this setting to bypass the "php" restriction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yxcmf/ukcms/issues/1
CVE ID: CVE-2018-14912 State: PUBLISHED Published: 2018-08-03T19:00:00 Last Updated: 2024-08-05T09:46:25.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00005.html - https://www.exploit-db.com/exploits/45195/ - https://www.debian.org/security/2018/dsa-4263 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1627 - https://lists.zx2c4.com/pipermail/cgit/2018-Aug
-4263 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1627 - https://lists.zx2c4.com/pipermail/cgit/2018-August/004176.html
CVE ID: CVE-2018-14915 State: REJECTED Published: 2018-10-17T18:00:00 Last Updated: 2018-10-17T17:57:01 Description: No description available.
CVE ID: CVE-2018-14916 State: PUBLISHED Published: 2019-06-28T17:19:36 Last Updated: 2024-08-05T09:46:24.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Apr/12 - http://packetstormsecurity.com/files/152453/Loytec-LGATE-902-XSS-Traversal-File-Deletion.html - https://seclists.org/fulldisclosure/2019/Apr/12
CVE ID: CVE-2018-14917 State: REJECTED Published: 2018-10-17T18:00:00 Last Updated: 2018-10-17T17:57:01 Description: No description available.
CVE ID: CVE-2018-14918 State: PUBLISHED Published: 2019-06-28T17:01:44 Last Updated: 2024-08-05T09:46:24.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Apr/12 - http://packetstormsecurity.com/files/152453/Loytec-LGATE-902-XSS-Traversal-File-Deletion.html - https://seclists.org/fulldisclosure/2019/Apr/12
CVE ID: CVE-2018-14919 State: PUBLISHED Published: 2019-06-28T16:39:25 Last Updated: 2024-08-05T09:46:24.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC LGATE-902 6.3.2 devices allow XSS. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Apr/12 - http://packetstormsecurity.com/files/152453/Loytec-LGATE-902-XSS-Traversal-File-Deletion.html - https://www.mag-securs.com/alertes/artmid/1894/articleid/41651/loytec-lgate-902-up-to-641-alarm-log-obj-handle-cross-site-scripting.aspx - https://seclists.org/fulldisclosure/2019/Apr/12
CVE ID: CVE-2018-14922 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T09:46:24.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name field in the edit profile page. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/148836/Monstra-Dev-3.0.4-Cross-Site-Scripting.html - https://indiancybersecuritysolutions.com/cve-2018-14922-cross-site-scripting/ - https://www.exploit-db.com/exploits/45156/
CVE ID: CVE-2018-14923 State: PUBLISHED Published: 2018-08-03T20:00:00Z Last Updated: 2024-09-17T02:12:04.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via video playback. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnvd.org.cn/flaw/show/1325763
CVE ID: CVE-2018-14924 State: PUBLISHED Published: 2018-08-03T21:00:00 Last Updated: 2024-08-05T09:46:24.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" (aka user fullname) field. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9
CVE ID: CVE-2018-14925 State: PUBLISHED Published: 2018-08-03T21:00:00 Last Updated: 2024-08-05T09:46:24.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace revealing use of net.sf.acegisecurity components. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9