Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-18259 State: PUBLISHED Published: 2018-10-15T19:00:00 Last Updated: 2024-08-05T11:08:21.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149771/LUYA-CMS-1.0.12-Cross-Site-Scripting.html
CVE ID: CVE-2018-18260 State: PUBLISHED Published: 2018-10-15T00:00:00 Last Updated: 2024-08-05T11:08:20.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false. NOTE: the vendor reports that they are "unable to reproduce the reported issue on any version." Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149772/CAMALEON-CMS-2.4-Cross-Site-Scripting.html
CVE ID: CVE-2018-18261 State: PUBLISHED Published: 2019-04-14T17:12:13 Last Updated: 2024-08-05T11:08:20.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caokang/waimai/issues/7
CVE ID: CVE-2018-18262 State: PUBLISHED Published: 2018-10-17T14:00:00 Last Updated: 2024-08-05T11:08:21.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager 12.3 before build 123214 has XSS. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Oct/34
CVE ID: CVE-2018-18264 State: PUBLISHED Published: 2019-01-03T01:00:00 Last Updated: 2024-08-05T11:08:21.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. Additional Analyst Notes: - CVE Program Container: References: - https://sysdig.com/blog/privilege-escalation-kubernetes-dashboard/ - http://www.securityfocus.com/bid/106493 - https://groups.google.com/forum/#%21topic/kubernetes-announce/yBrFf5nmvfI - https://github.com/kubernetes/dashboard/releases/tag/v1.10.1 - https://github.com/kubernetes/dashboard/pull/3400 - https://git
//github.com/kubernetes/dashboard/releases/tag/v1.10.1 - https://github.com/kubernetes/dashboard/pull/3400 - https://github.com/kubernetes/dashboard/pull/3289
CVE ID: CVE-2018-18270 State: PUBLISHED Published: 2018-10-12T19:00:00Z Last Updated: 2024-09-16T19:35:22.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in CMS Made Simple version 2.2.7 via the m1_news_url parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cmsmadesimple/cmsmadesimple-2-0/issues/12
CVE ID: CVE-2018-18271 State: PUBLISHED Published: 2018-10-12T19:00:00Z Last Updated: 2024-09-17T00:45:37.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in CMS Made Simple version 2.2.7 via the m1_extra parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cmsmadesimple/cmsmadesimple-2-0/issues/13
CVE ID: CVE-2018-18274 State: PUBLISHED Published: 2018-10-12T21:00:00 Last Updated: 2024-08-05T11:08:21.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kermitt2/pdfalto/issues/33 - https://github.com/TeamSeri0us/pocs/tree/master/pdfalto
CVE ID: CVE-2018-18276 State: PUBLISHED Published: 2019-04-26T19:43:31 Last Updated: 2024-08-05T11:08:21.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel. Additional Analyst Notes: - CVE Program Container: References: - http://www.cinquino.eu/ProFiles%201.5%20Free%20Version%20Component%20Xss.htm
CVE ID: CVE-2018-18281 State: PUBLISHED Published: 2018-10-30T18:00:00 Last Updated: 2024-08-05T11:08:21.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19. Additional Analyst Notes: - CVE Program Container: References: - http://packets
rsions: 4.9.135, 4.14.78, 4.18.16, 4.19. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150001/Linux-mremap-TLB-Flush-Too-Late.html - https://usn.ubuntu.com/3835-1/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.16 - https://usn.ubuntu.com/3880-1/ - https://usn.ubuntu.com/3871-5/ - https://usn.ubuntu.com/3871-4/ - http://www.openwall.com/lists/oss-security/2018/10/29/5 - https://usn.ubuntu.com/3880-2/ - https://usn.ubuntu.com/3832-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=eb66ae030829605d61fbef1909ce310e29f78821 - http://www.securityfocus.com/bid/105761 - https://usn.ubuntu.com/3871
mit/?id=eb66ae030829605d61fbef1909ce310e29f78821 - http://www.securityfocus.com/bid/105761 - https://usn.ubuntu.com/3871-1/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.78 - http://www.securityfocus.com/bid/106503 - https://usn.ubuntu.com/3871-3/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=1695 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.135 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://access.redhat.com/errata/RHSA-2019:0831 - https://access.redhat.com/errata/RHSA-2019:2043
019/04/msg00004.html - https://access.redhat.com/errata/RHSA-2019:0831 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - https://access.redhat.com/errata/RHSA-2020:0036 - https://access.redhat.com/errata/RHSA-2020:0100 - https://access.redhat.com/errata/RHSA-2020:0103 - https://access.redhat.com/errata/RHSA-2020:0179
CVE ID: CVE-2018-18282 State: PUBLISHED Published: 2018-10-12T22:00:00Z Last Updated: 2024-09-16T16:33:11.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zeit/next.js/releases/tag/7.0.2
CVE ID: CVE-2018-18284 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T11:08:21.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=8d19fdf63f91f50466b08f23e2d93d37a4c5ea0b - https://security.gentoo.org/glsa/201811-12 - https://access.redhat.com/errata/RHSA-2018:3834 - https://usn.ubuntu.com/3803-1/ - https://www.debian.org/security/2018/dsa-4336 - http://www.openwall.com/lists/oss-security/2018/10/16/2 - htt
/3803-1/ - https://www.debian.org/security/2018/dsa-4336 - http://www.openwall.com/lists/oss-security/2018/10/16/2 - https://lists.debian.org/debian-lts-announce/2018/10/msg00013.html - https://bugs.ghostscript.com/show_bug.cgi?id=699963 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1696 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - http://www.securityfocus.com/bid/107451 - https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-18285 State: PUBLISHED Published: 2019-04-25T19:12:13 Last Updated: 2024-08-05T11:08:21.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/en-gb/support/security-advisories/mitel-product-security-adivsory-19-0003-001 - https://www.mitel.com/-/media/mitel/
com/en-gb/support/security-advisories/mitel-product-security-adivsory-19-0003-001 - https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-19-0003-001.pdf
CVE ID: CVE-2018-18286 State: PUBLISHED Published: 2019-04-25T18:57:33 Last Updated: 2024-08-05T11:08:21.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/en-gb/support/security-advisories/mitel-product-security-adivsory-19-0003-001 - https://www.mitel.com/-/media/mi
tel.com/en-gb/support/security-advisories/mitel-product-security-adivsory-19-0003-001 - https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-19-0003-001.pdf
CVE ID: CVE-2018-18287 State: PUBLISHED Published: 2018-10-14T21:00:00 Last Updated: 2024-08-05T11:08:21.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the Main_Login.asp page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remix30303/AsusLeak
CVE ID: CVE-2018-18288 State: PUBLISHED Published: 2019-12-26T00:00:00 Last Updated: 2024-08-05T11:08:21.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection. Additional Analyst Notes: - CVE Program Container: References: - https://www.crushftp.com/version8_build.html
CVE ID: CVE-2018-18289 State: PUBLISHED Published: 2018-10-14T21:00:00Z Last Updated: 2024-09-17T03:28:01.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.atlassian.com/apps/1215171/zabbix-plugin?hosting=server&tab=versions
CVE ID: CVE-2018-18290 State: PUBLISHED Published: 2018-10-14T21:00:00 Last Updated: 2024-08-05T11:08:21.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html&name=home_content allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/gnat/nc-cms/issues/9
CVE ID: CVE-2018-18291 State: PUBLISHED Published: 2018-10-14T21:00:00Z Last Updated: 2024-09-16T18:49:29.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML via Advanced_ASUSDDNS_Content.asp, Advanced_WSecurity_Content.asp, Advanced_Wireless_Content.asp, Logout.asp, Main_Login.asp, MobileQIS_Login.asp, QIS_wizard.htma, YandexDNS.asp, ajax_status.xml, apply.cgi, clients.asp, disk.asp, disk_utility.asp, or internet.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remix30303/AsusXSS/
CVE ID: CVE-2018-18296 State: PUBLISHED Published: 2018-10-15T02:00:00 Last Updated: 2024-08-05T11:08:21.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/52/
CVE ID: CVE-2018-18307 State: PUBLISHED Published: 2018-10-16T00:00:00.000Z Last Updated: 2025-08-29T15:03:47.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS via the /admin/pictures image field. NOTE: the vendor's position is that this is not a valid report: "The researcher used an authorized cookie to perform the request to a password-protected route. Without that session cookie, the request would have been rejected as unauthorized." Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149787/Alchemy-CMS-4.1-Stable-Cross-Site-Scripting.html - https:/
er: References: - http://packetstormsecurity.com/files/149787/Alchemy-CMS-4.1-Stable-Cross-Site-Scripting.html - https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/pictures_controller.rb#L5 - https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/resources_controller.rb#L21 - https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/base_controller.rb#L15 - https://www.exploit-db.com/exploits/45601
CVE ID: CVE-2018-18308 State: PUBLISHED Published: 2018-10-16T22:00:00 Last Updated: 2024-08-05T11:08:21.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (aka the image upload area). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149788/BigTree-CMS-4.2.23-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/45628/ - https://github.com/bigtreecms/BigTree-CMS/issues/356 - https://github.com/bigtreecms/BigTree-CMS/commit/ffd668a3aa7d2f540dbcdf5751f207302519df72
CVE ID: CVE-2018-18309 State: PUBLISHED Published: 2018-10-15T02:00:00 Last Updated: 2024-08-05T11:08:21.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in read_reloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing _bfd_clear_contents bounds checking. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23770 - http://www.securityfocus.
- CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23770 - http://www.securityfocus.com/bid/105692 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=0930cb3021b8078b34cf216e79eb8608d017864f - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-18310 State: PUBLISHED Published: 2018-10-15T02:00:00 Last Updated: 2024-08-05T11:08:21.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by consider_notes. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23752 - https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html - https://sourceware.org/ml/elfutils-devel/2018-q4/msg00022.html - https://
rg/debian-lts-announce/2019/02/msg00036.html - https://sourceware.org/ml/elfutils-devel/2018-q4/msg00022.html - https://usn.ubuntu.com/4012-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html - https://access.redhat.com/errata/RHSA-2019:2197 - https://lists.debian.org/debian-lts-announce/2021/10/msg00030.html
CVE ID: CVE-2018-18311 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T11:08:21.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00039.html - https://www.debian.org/security/2018/dsa-4347 - http://www.securityfocus.com/bid/106145 - http://www.securitytracker.com/id/1042181 - https://access.redhat.com/errata/RHSA-2019:0010 - https://usn.ubuntu.com/3834-2/ - https://lists.fedoraproject.org/archives/
s://access.redhat.com/errata/RHSA-2019:0010 - https://usn.ubuntu.com/3834-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/ - https://access.redhat.com/errata/RHSA-2019:0001 - https://access.redhat.com/errata/RHSA-2019:0109 - https://usn.ubuntu.com/3834-1/ - https://seclists.org/bugtraq/2019/Mar/42 - http://seclists.org/fulldisclosure/2019/Mar/49 - https://access.redhat.com/errata/RHBA-2019:0327 - https://access.redhat.com/errata/RHSA-2019:1790 - https://access.redhat.com/errata/RHSA-2019:1942 - https://access.redhat.com/errata/RHSA-2019:2400 - https://security.gentoo.org/glsa/201909-01 - https://www.oracle
1942 - https://access.redhat.com/errata/RHSA-2019:2400 - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://support.apple.com/kb/HT209600 - https://bugzilla.redhat.com/show_bug.cgi?id=1646730 - https://security.netapp.com/advisory/ntap-20190221-0003/ - https://metacpan.org/changes/release/SHAY/perl-5.26.3 - https://metacpan.org/changes/release/SHAY/perl-5.28.1 - https://rt.perl.org/Ticket/Display.html?id=133204 - https://github.com/Perl/perl5/commit/34716e2a6ee2af96078d62b065b7785c001194be - https://
Ticket/Display.html?id=133204 - https://github.com/Perl/perl5/commit/34716e2a6ee2af96078d62b065b7785c001194be - https://kc.mcafee.com/corporate/index?page=content&id=SB10278
CVE ID: CVE-2018-18312 State: PUBLISHED Published: 2018-12-05T22:00:00 Last Updated: 2024-08-05T11:08:21.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4347 - http://www.securityfocus.com/bid/106179 - http://www.securitytracker.com/id/1042181 - https://access.redhat.com/errata/RHSA-2019:0010 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/ - https://ac
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/ - https://access.redhat.com/errata/RHSA-2019:0001 - https://usn.ubuntu.com/3834-1/ - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpujul2020.html - https://security.netapp.com/advisory/ntap-20190221-0003/ - https://metacpan.org/changes/release/SHAY/perl-5.26.3 - https://metacpan.org/changes/release/SHAY/perl-5.28.1 - https://bugzilla.redhat.com/show_bug.cgi?id=1646734 - https://rt.perl.org/Public/Bug/Display.html?id=133423
CVE ID: CVE-2018-18313 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T11:08:21.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4347 - http://www.securitytracker.com/id/1042181 - https://access.redhat.com/errata/RHSA-2019:0010 - https://usn.ubuntu.com/3834-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/ - https://acce
ct.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/ - https://access.redhat.com/errata/RHSA-2019:0001 - https://usn.ubuntu.com/3834-1/ - https://seclists.org/bugtraq/2019/Mar/42 - http://seclists.org/fulldisclosure/2019/Mar/49 - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpujul2020.html - https://support.apple.com/kb/HT209600 - https://security.netapp.com/advisory/ntap-20190221-0003/ - https://metacpan.org/changes/release/SHAY/perl-5.26.3 - https://bugzilla.redhat.com/show_bug.cgi?id=1646738 - https://rt.perl.org/Ticket/Display.html?id=133192 - https://github.com/Perl/perl5/commit/43b2f4ef399e2fd72
?id=1646738 - https://rt.perl.org/Ticket/Display.html?id=133192 - https://github.com/Perl/perl5/commit/43b2f4ef399e2fd7240b4eeb0658686ad95f8e62
CVE ID: CVE-2018-18314 State: PUBLISHED Published: 2018-12-07T21:00:00 Last Updated: 2024-08-05T11:08:21.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4347 - http://www.securityfocus.com/bid/106145 - http://www.securitytracker.com/id/1042181 - https://access.redhat.com/errata/RHSA-2019:0010 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/ - https://access.redhat.com/errata/RH
ckage-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/ - https://access.redhat.com/errata/RHSA-2019:0001 - https://usn.ubuntu.com/3834-1/ - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpujul2020.html - https://security.netapp.com/advisory/ntap-20190221-0003/ - https://metacpan.org/changes/release/SHAY/perl-5.26.3 - https://github.com/Perl/perl5/commit/19a498a461d7c81ae3507c450953d1148efecf4f - https://bugzilla.redhat.com/show_bug.cgi?id=1646751 - https://rt.perl.org/Ticket/Display.html?id=131649
CVE ID: CVE-2018-18315 State: PUBLISHED Published: 2018-10-15T04:00:00 Last Updated: 2024-08-05T11:08:21.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuhuisheng/lemon/issues/175
CVE ID: CVE-2018-18316 State: PUBLISHED Published: 2018-10-15T04:00:00 Last Updated: 2024-08-05T11:08:21.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog v6.0.0 has CSRF via the admin/user.php?action=new URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yanchongchong/swallow/issues/5