Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1000625 State: PUBLISHED Published: 2018-12-28T14:00:00 Last Updated: 2024-08-05T12:40:47.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An attacker could exploit this vulnerability to log in as an admin on any installation and gain unauthorized access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147302
CVE ID: CVE-2018-1000626 State: PUBLISHED Published: 2018-12-28T14:00:00 Last Updated: 2024-08-05T12:40:47.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attacker could exploit this vulnerability using all available API functions containing an unchanged API key to gain unauthorized access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147303
CVE ID: CVE-2018-1000627 State: PUBLISHED Published: 2018-12-28T14:00:00 Last Updated: 2024-08-05T12:40:47.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file. An attacker could exploit this vulnerability to obtain the current API key to gain unauthorized access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147304
CVE ID: CVE-2018-1000628 State: PUBLISHED Published: 2018-12-28T14:00:00 Last Updated: 2024-08-05T12:40:47.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp() function. By adding "[]" to the end of "key" in the URL when accessing API functions, an attacker could exploit this vulnerability to execute API functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147305
CVE ID: CVE-2018-1000629 State: PUBLISHED Published: 2018-12-28T14:00:00 Last Updated: 2024-08-05T12:40:47.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php script. A remote attacker could exploit this vulnerability using the parameterName or _login_username parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication cr
, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147306
CVE ID: CVE-2018-1000630 State: PUBLISHED Published: 2018-12-28T14:00:00 Last Updated: 2024-08-05T12:40:47.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/PluginStatusActions.php and /status/pluginStatus.php using the jtSorting or id parameter, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147307
CVE ID: CVE-2018-1000631 State: PUBLISHED Published: 2018-12-28T14:00:00 Last Updated: 2024-08-05T12:40:47.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::user_info() function, which could allow the attacker to view, add, modify or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147308
CVE ID: CVE-2018-1000632 State: PUBLISHED Published: 2018-08-20T19:00:00 Last Updated: 2024-08-05T12:40:47.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00028.html - ht
st Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00028.html - https://access.redhat.com/errata/RHSA-2019:0364 - https://access.redhat.com/errata/RHSA-2019:0362 - https://access.redhat.com/errata/RHSA-2019:0365 - https://access.redhat.com/errata/RHSA-2019:0380 - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:1160 - https://access.redhat.com/errata/RHSA-2019:1162 - https://access.redhat.com/errata/RHSA-2019:1159 - https://access.redhat.com/errata/RHSA-2019:1161 - https://lists.apache.org/thread.html/7f6e120e6ed47
ta/RHSA-2019:1159 - https://access.redhat.com/errata/RHSA-2019:1161 - https://lists.apache.org/thread.html/7f6e120e6ed473f4e00dde4c398fc6698eb383bd7857d20513e989ce%40%3Cdev.maven.apache.org%3E - https://lists.apache.org/thread.html/4a77652531d62299a30815cf5f233af183425db8e3c9a824a814e768%40%3Cdev.maven.apache.org%3E - https://lists.apache.org/thread.html/5a020ecaa3c701f408f612f7ba2ee37a021644c4a39da2079ed3ddbc%40%3Ccommits.maven.apache.org%3E - https://lists.apache.org/thread.html/00571f362a7a2470fba50a31282c65637c40d2e21ebe6ee535a4ed74%40%3Ccommits.maven.apache.org%3E - https://lists.apache.org/thread.html/d7d960b2778e35ec9b4d40c8efd468c7ce7163bcf6489b633491c89f%40%3Cdev.maven.apache.org%3E
tps://lists.apache.org/thread.html/d7d960b2778e35ec9b4d40c8efd468c7ce7163bcf6489b633491c89f%40%3Cdev.maven.apache.org%3E - https://lists.apache.org/thread.html/9d4c1af6f702c3d6d6f229de57112ddccac8ce44446a01b7937ab9e0%40%3Ccommits.maven.apache.org%3E - https://lists.apache.org/thread.html/7e9e78f0e4288fac6591992836d2a80d4df19161e54bd71ab4b8e458%40%3Cdev.maven.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3172 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://github.com/dom4j/dom4j/issues/48 - https://github.com/dom4j/dom4j/commit
rity-advisory/cpujan2019-5072801.html - https://github.com/dom4j/dom4j/issues/48 - https://github.com/dom4j/dom4j/commit/e598eb43d418744c4dbf62f647dd2381c9ce9387 - https://ihacktoprotect.com/post/dom4j-xml-injection/ - https://security.netapp.com/advisory/ntap-20190530-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOOVVCRQE6ATFD2JM2EMDXOQXTRIVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJULAHVR3I5SX7OSMXAG75IMNSAYOXGA/ - https://www.oracle.com/security-alerts/cpuApr2021.html - https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51%40%3
ts/cpuApr2021.html - https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51%40%3Cnotifications.freemarker.apache.org%3E
CVE ID: CVE-2018-1000633 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T19:56:01.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7. Additional Analyst Notes: - CVE Program Container: References: - http://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html - http://w
alyst Notes: - CVE Program Container: References: - http://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html - http://www.openmicroscopy.org/security/advisories/2018-SV1-post-password/
CVE ID: CVE-2018-1000634 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-17T02:07:05.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.openmicroscopy.or
have been fixed in 5.4.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html - https://www.openmicroscopy.org/security/advisories/2018-SV3-modify-user-password/
CVE ID: CVE-2018-1000635 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T23:17:15.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html - https://www.openmicroscopy.org/security/advisories/2018-SV2-script-name-uuid/
CVE ID: CVE-2018-1000636 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-17T02:41:28.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: JerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history it seems that the issue has been present since commit 64a340ffeb8809b2b66bbe32fd443a8b79fdd860 contains a CWE-476: NULL Pointer Dereference vulnerability in Triggering undefined behavior at jerry-core/ecma/builtin-objects/typedarray/ecma-builtin-typedarray-prototype.c:598 (passing NULL to memcpy as 2nd argument) results in null pointer dereference (segfault) at jerry-core/jmem/jmem-heap.c:463 that can result in Crash due to seg
t) results in null pointer dereference (segfault) at jerry-core/jmem/jmem-heap.c:463 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute specially crafted javascript code. This vulnerability appears to have been fixed in after commit 87897849f6879df10e8ad68a41bf8cf507edf710. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/2435
CVE ID: CVE-2018-1000637 State: PUBLISHED Published: 2018-08-20T19:00:00 Last Updated: 2024-08-05T12:40:47.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fixed in 1.8-pre2. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00016.html - https://bugs.debian.org/904819 - https://lists.nongnu.org/archive/html/zutils-bug/
-lts-announce/2018/09/msg00016.html - https://bugs.debian.org/904819 - https://lists.nongnu.org/archive/html/zutils-bug/2018-08/msg00000.html
CVE ID: CVE-2018-1000638 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T20:06:37.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/20
CVE ID: CVE-2018-1000639 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-17T04:25:03.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result in disclosure of data, server side request forgery, port scanning, possible rce. This attack appear to be exploitable via Specially crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - https://0dd.zone/2018/08/05/LatexDraw-XXE/ - https://github.com/arnobl/latexdraw/issues/10
CVE ID: CVE-2018-1000640 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T21:07:35.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be exploitable via Malicious input passed in GET parameter. Additional Analyst Notes: - CVE Program Container: References: - https://0dd.zone/2018/08/05/OpenCart-Overclocked-Reflected-XSS/ - https://github.com/villagedefrance/OpenCart-Ove
ces: - https://0dd.zone/2018/08/05/OpenCart-Overclocked-Reflected-XSS/ - https://github.com/villagedefrance/OpenCart-Overclocked/issues/190
CVE ID: CVE-2018-1000641 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T23:26:13.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/YesWiki/yeswiki/issues/356 - https://0dd.zone/2018/08/05/YesWiki-Object-Injection/
CVE ID: CVE-2018-1000642 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-17T02:31:53.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09a3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ysurac/FlightAirMap/issues/410 - https://0dd.zone/2018/08/05/FlightAirMap-Reflected-XSS/
CVE ID: CVE-2018-1000643 State: REJECTED Published: 2018-08-20T19:00:00 Last Updated: 2019-04-17T19:49:42 Description: No description available.
CVE ID: CVE-2018-1000644 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T20:31:48.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted RDF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/rdf4j/issues/1056 - https://0dd.zone/2018/08/05/rdf4j-XXE/
CVE ID: CVE-2018-1000645 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-17T00:06:22.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of templates allows local file disclosure that can result in Disclosure of sensitive files on the server. This attack appear to be exploitable via User controlled variable in import templates function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/issues/1210 - https://0dd.zone/2018/08/05/lh-ehr-Authenticated-Local-File-Disclosure/
CVE ID: CVE-2018-1000646 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T23:51:06.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with malicious content and may lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write/ - https://github.com/LibreHealthIO/lh-ehr/issues/1211
CVE ID: CVE-2018-1000647 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-17T04:29:25.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/issues/1212 - https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Deletion/
CVE ID: CVE-2018-1000648 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T16:13:31.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/issues/1213 - https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write-Letter-PHP/
CVE ID: CVE-2018-1000649 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T16:59:00.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php (2) vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/issues/1214 - https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write-Letter-PHP-2/
CVE ID: CVE-2018-1000650 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T21:04:06.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters. Additional Analyst Notes: - CVE Program Container: References: - https://0dd.zone/2018/08/08/lh-ehr-Authenticated-SQL-Injection/ - https://github.com/LibreHealthIO/lh-ehr/issues/1215
CVE ID: CVE-2018-1000651 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T17:47:49.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - https://0dd.zone/2018/08/08/stroom-XXE/ - https://github.com/gchq/stroom/issues/813
CVE ID: CVE-2018-1000652 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-16T17:18:36.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file. This vulnerability appears to have been fixed in after commit 89f855d. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JabRef/jabref/issues/4229 - https://0dd.zone/2018/08/08/JabRef-XXE/
CVE ID: CVE-2018-1000653 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-17T02:37:06.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Lz1y/3388fa886a3e10edd2a7e93d3c3e5b6c
CVE ID: CVE-2018-1000654 State: PUBLISHED Published: 2018-08-20T19:00:00 Last Updated: 2024-08-05T12:40:47.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gnutls/libtasn1/issues/4 - http://www.securityfocus.com/bid/105151 - http://lists.opensuse.org/opensuse-security-annou
m/gnutls/libtasn1/issues/4 - http://www.securityfocus.com/bid/105151 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2018-1000655 State: PUBLISHED Published: 2018-08-20T19:00:00Z Last Updated: 2024-09-17T02:05:45.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. This vulnerability appears to have been fixed in 2.4.67. Additional Analyst Notes: - CVE Program Container: References: - https://jsish.org/fossil/jsi/tktview/3b8f95574f2c9dddf5ffea71e0086b2e6f6dd71e