Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-8817 State: PUBLISHED Published: 2018-03-25T19:00:00 Last Updated: 2024-08-05T07:02:26.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wampserver before 3.1.3 has CSRF in add_vhost.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44385/ - http://forum.wampserver.com/read.php?2%2C138295%2C150722%2Cpage=6#msg-150722 - https://seclists.org/bugtraq/2019/Jun/10
CVE ID: CVE-2018-8819 State: PUBLISHED Published: 2018-06-14T20:00:00 Last Updated: 2024-08-05T07:02:26.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via the "X-Wap-Profile" HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jun/21 - http://packetstormsecurity.com/files/148126/WebCTRL-Out-Of-Band-XML-Injection.html - ht
org/fulldisclosure/2018/Jun/21 - http://packetstormsecurity.com/files/148126/WebCTRL-Out-Of-Band-XML-Injection.html - https://hateshape.github.io/general/2018/06/07/CVE-2018-8819.html
CVE ID: CVE-2018-8820 State: PUBLISHED Published: 2018-03-28T20:00:00 Last Updated: 2024-08-05T07:02:26.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the "match" parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xp_cmdshell. In some cases, the authentication requirement for the attack can be met by sending the default admin credentials. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/57
CVE ID: CVE-2018-8821 State: PUBLISHED Published: 2018-03-20T07:00:00 Last Updated: 2024-08-05T07:02:26.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigric3/poc
CVE ID: CVE-2018-8822 State: PUBLISHED Published: 2018-03-20T00:00:00 Last Updated: 2024-08-05T07:02:26.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/staging/ncpfs/ncplib_kernel.c in the Linux kernel 4.16-rc through 4.16-rc6, could be exploited by malicious NCPFS servers to crash the kernel or execute code. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3654-1/ - http://www.securityfocus.com/bid/103476 - https://www.debian.org/security/2018/dsa
87 - https://usn.ubuntu.com/3654-1/ - http://www.securityfocus.com/bid/103476 - https://www.debian.org/security/2018/dsa-4188 - https://www.mail-archive.com/netdev%40vger.kernel.org/msg223373.html - https://usn.ubuntu.com/3653-2/ - https://usn.ubuntu.com/3655-1/ - https://usn.ubuntu.com/3654-2/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3655-2/ - https://usn.ubuntu.com/3656-1/ - https://usn.ubuntu.com/3653-1/ - https://usn.ubuntu.com/3657-1/ - http://www.openwall.com/lists/oss-security/2022/12/27/3
CVE ID: CVE-2018-8823 State: PUBLISHED Published: 2018-03-28T02:00:00 Last Updated: 2024-08-05T07:02:26.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ia-informatica.com/it/CVE-2018-8823
CVE ID: CVE-2018-8824 State: PUBLISHED Published: 2018-05-10T03:00:00 Last Updated: 2024-08-05T07:02:26.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute a SQL Injection through function calls in the code parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ia-informatica.com/it/CVE-2018-8824
CVE ID: CVE-2018-8825 State: PUBLISHED Published: 2019-04-23T20:50:05 Last Updated: 2024-08-05T07:02:26.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-003.md
CVE ID: CVE-2018-8826 State: PUBLISHED Published: 2018-04-20T20:00:00 Last Updated: 2024-08-05T07:02:26.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.
te arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/us/supportonly/RT-AC55UHP/HelpDesk_BIOS/ - https://www.asus.com/Networking/RT-AC2900/HelpDesk_BIOS/ - https://www.asus.com/us/supportonly/RT-AC55U/HelpDesk_BIOS/ - https://www.asus.com/us/Networking/RTN66W/HelpDesk_BIOS/ - https://www.asus.com/Networking/RT-AC52U-B1/HelpDesk_BIOS/ - https://www.asus.com/us/Networking/RTN12_D1/HelpDesk_BIOS/ - https://www.asus.com/ca-en/Networking/RT-N600/HelpDesk_Download/ - https://www.asus.com/us/Networking/RT-AC1750/HelpDesk_BIOS/ - https://www.asus.com/us/supportonly/RT-AC51U/HelpDesk_BIOS/ - https://www.asus.com/us/Networking/
C1750/HelpDesk_BIOS/ - https://www.asus.com/us/supportonly/RT-AC51U/HelpDesk_BIOS/ - https://www.asus.com/us/Networking/RT-AC1200/HelpDesk_BIOS/ - https://www.asus.com/sg/Networking/RT-AC58U/HelpDesk_BIOS/ - https://www.asus.com/us/Networking/RTAC66U/HelpDesk_BIOS/ - https://www.asus.com/us/Networking/RT-AC86U/HelpDesk_BIOS/ - https://www.asus.com/us/Networking/RT-ACRH13/HelpDesk_BIOS/
CVE ID: CVE-2018-8827 State: PUBLISHED Published: 2019-01-03T23:00:00 Last Updated: 2024-08-05T07:02:26.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - http://45.32.113.185/075a6fa2d5db3bf3457896bee6db6787.html
CVE ID: CVE-2018-8828 State: PUBLISHED Published: 2018-03-20T20:00:00 Last Updated: 2024-08-05T07:02:26.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmx_check_pretran function in modules/tmx/tmx_pretran.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kamailio/kamailio/commit/e1d8008a09d9390ebaf698abe8909e10dfec4097 - https://github.com/EnableSecurity/advisories/tree/master/ES2018-05-kamailio-heap-ove
a09d9390ebaf698abe8909e10dfec4097 - https://github.com/EnableSecurity/advisories/tree/master/ES2018-05-kamailio-heap-overflow - https://www.debian.org/security/2018/dsa-4148 - https://usn.ubuntu.com/4240-1/
CVE ID: CVE-2018-8831 State: PUBLISHED Published: 2018-04-18T17:00:00 Last Updated: 2024-08-05T07:02:26.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Apr/36 - https://www.exploit-db.com/exploits/44487/ - https://trac.kodi.tv/ticket/17814
CVE ID: CVE-2018-8832 State: PUBLISHED Published: 2018-03-20T21:00:00 Last Updated: 2024-08-05T07:02:26.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: enhavo 0.4.0 has XSS via a user-group that contains executable JavaScript code in the user-group name. The XSS attack launches when a victim visits the admin user group page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/enhavo/enhavo/issues/459
CVE ID: CVE-2018-8833 State: PUBLISHED Published: 2018-04-25T23:00:00Z Last Updated: 2024-09-17T00:52:16.210Z Vendors: ICS-CERT Products: Advantech WebAccess HMI Designer Problem Types: CWE-122 Description: Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103972 - https://ics-cert.us-cert.gov/advisories/ICSA-18-114-03
CVE ID: CVE-2018-8834 State: PUBLISHED Published: 2018-04-17T19:00:00Z Last Updated: 2024-09-16T19:25:23.504Z Vendors: ICS-CERT Products: Omron CX-One Problem Types: CWE-122 Description: Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02
CVE ID: CVE-2018-8835 State: PUBLISHED Published: 2018-04-25T23:00:00Z Last Updated: 2024-09-17T00:52:16.770Z Vendors: ICS-CERT Products: Advantech WebAccess HMI Designer Problem Types: CWE-415 Description: Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103972 - https://ics-cert.us-cert.gov/advisories/ICSA-18-114-03
CVE ID: CVE-2018-8836 State: PUBLISHED Published: 2018-04-03T13:00:00Z Last Updated: 2024-09-17T04:13:48.585Z Vendors: WAGO Products: WAGO 750 Series Problem Types: CWE-404 Description: Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools. Additional Analyst Notes: - CVE Program Container: References: - ht
communications with commissioning and service tools. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103726 - https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01 - https://www.wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE
CVE ID: CVE-2018-8837 State: PUBLISHED Published: 2018-04-25T23:00:00Z Last Updated: 2024-09-16T23:25:22.794Z Vendors: ICS-CERT Products: Advantech WebAccess HMI Designer Problem Types: CWE-787 Description: Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103972 - https://ics-cert.us-cert.gov/advisories/ICSA-18-114-03
CVE ID: CVE-2018-8838 State: PUBLISHED Published: 2018-04-17T21:00:00Z Last Updated: 2024-09-17T00:30:30.233Z Vendors: ICS-CERT Products: Yokogawa CENTUM and Exaopc Problem Types: Permissions, Privileges, and Access Controls Description: A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier, Exaopc versions R3.75.00 and earlier, B/M9000 CS all versions, and B/M9000 VP versions R8.01.01 and earlier may allow a local attacker to exploit the message managemen
S all versions, and B/M9000 VP versions R8.01.01 and earlier may allow a local attacker to exploit the message management function of the system. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H). Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-102-01
CVE ID: CVE-2018-8839 State: PUBLISHED Published: 2018-04-30T15:00:00Z Last Updated: 2024-09-16T20:13:20.230Z Vendors: Delta Electronics Products: PMSoft Problem Types: CWE-121 Description: Delta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities where a .ppm file can introduce a value larger than is readable by PMSoft's fixed-length stack buffer. This can cause the buffer to be overwritten, which may allow arbitrary code execution or cause the application to crash. CVSS v3 base score: 7.1; CVSS vector string: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H. Delta Electronics recommends affected users update to at least PMSoft v2.11, which was made available as of M
N/I:H/A:H. Delta Electronics recommends affected users update to at least PMSoft v2.11, which was made available as of March 22, 2018, or the latest available version. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104013 - https://ics-cert.us-cert.gov/advisories/ICSA-18-116-01
CVE ID: CVE-2018-8840 State: PUBLISHED Published: 2018-04-18T20:00:00Z Last Updated: 2024-09-16T17:53:19.851Z Vendors: ICS-CERT Products: Schneider Electric InduSoft Web Studio and InTouch Machine Edition Problem Types: CWE-121 Description: A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103949 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000125/ - ht
tp://www.securityfocus.com/bid/103949 - http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000125/ - https://www.tenable.com/security/research/tra-2018-07 - https://ics-cert.us-cert.gov/advisories/ICSA-18-107-01
CVE ID: CVE-2018-8841 State: PUBLISHED Published: 2018-05-15T22:00:00Z Last Updated: 2024-09-16T16:14:04.315Z Vendors: Advantech Products: WebAccess Problem Types: CWE-269 Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated user to modify files when read access should only be given to the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisorie
- CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01
CVE ID: CVE-2018-8842 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-16T17:18:41.660Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: CWE-319 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips
ls from within the same subnet. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-8843 State: PUBLISHED Published: 2018-05-14T18:00:00Z Last Updated: 2024-09-16T20:27:15.193Z Vendors: ICS-CERT Products: Rockwell Automation Arena Problem Types: CWE-416 Description: Rockwell Automation Arena versions 15.10.00 and prior contains a use after free vulnerability caused by processing specially crafted Arena Simulation Software files that may cause the software application to crash, potentially losing any unsaved data.. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104166 - https://ics-cert.us-cert.gov/advisories/ICSA-18-130-02
CVE ID: CVE-2018-8844 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-16T16:22:34.701Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: CWE-352 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-8845 State: PUBLISHED Published: 2018-05-15T22:00:00Z Last Updated: 2024-09-17T04:20:14.985Z Vendors: Advantech Products: WebAccess Problem Types: CWE-122 Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a heap-based buffer overflow vulnerability has been identified, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104190 - https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01
CVE ID: CVE-2018-8846 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-16T21:56:29.045Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: CWE-79 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is then served to other users. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-8847 State: PUBLISHED Published: 2018-07-13T19:00:00Z Last Updated: 2024-09-16T17:27:52.109Z Vendors: ICS-CERT Products: Eaton 9000X Drive Problem Types: CWE-121 Description: Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton_9000X_Drive.pdf - http://www.securityfocus.com/bid/104736 - https://ics-cert.us-cert.gov/advisories/ICSA-18-193-01
CVE ID: CVE-2018-8848 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-17T01:21:25.868Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: CWE-276 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-8849 State: PUBLISHED Published: 2018-05-18T13:00:00Z Last Updated: 2025-06-27T16:24:54.910Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Medtronic Products: N'Vision Clinician Programmer, 8870 N’Vision removable Application Card Problem Types: CWE-311 Description: Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104213 - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-137-01 - http://www.medtronic.com/content/dam/m
04213 - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-137-01 - http://www.medtronic.com/content/dam/medtronic-com/us-en/corporate/documents/Medtronic-NVision-8840_Security-Bulletin_FINAL.pdf - https://www.medtronic.com/security
CVE ID: CVE-2018-8850 State: PUBLISHED Published: 2018-09-26T19:00:00Z Last Updated: 2024-09-17T01:15:54.816Z Vendors: Philips Products: e-Alert Unit (non-medical device) Problem Types: CWE-20 Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not validate input properly, allowing an attacker to craft the input in a form that is not expected by the rest of the application. This would lead to parts of the unit receiving unintended input, which may result in altered control flow, arbitrary control of a resource, or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/abou
execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/105194 - https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01
CVE ID: CVE-2018-8851 State: PUBLISHED Published: 2018-07-24T17:00:00Z Last Updated: 2024-09-16T19:37:04.245Z Vendors: Echelon Products: SmartServer 1, SmartServer 2, i.LON 100, i.LON 600 Problem Types: CWE-256 Description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03