Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9234 State: PUBLISHED Published: 2018-04-04T00:00:00 Last Updated: 2024-08-05T07:17:52.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey. Additional Analyst Notes: - CVE Program Container: References: - https://dev.gnupg.org/T3844 - https://usn.ubuntu.com/3675-1/
CVE ID: CVE-2018-9235 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/caQW37fY - https://www.exploit-db.com/exploits/44434/
CVE ID: CVE-2018-9236 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/Amw08sAj - https://www.exploit-db.com/exploits/44436/
CVE ID: CVE-2018-9237 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:52.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44436/ - https://pastebin.com/9C0QBs8u
CVE ID: CVE-2018-9238 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:52.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44424/ - https://pastebin.com/ia7U4vi9
CVE ID: CVE-2018-9240 State: PUBLISHED Published: 2018-04-03T22:00:00 Last Updated: 2024-08-05T07:17:51.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/894724 - https://lists.debian.org/debian-lts-announce/2020/04/msg00020.html - https://usn.ubuntu.com/4507-1/
CVE ID: CVE-2018-9242 State: PUBLISHED Published: 2018-07-03T21:00:00 Last Updated: 2024-08-05T07:17:51.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier may allow an attacker to delete files in the system via specific request parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041242 - http://www.securityfocus.com/bid/104676 - https://security.paloaltonetworks.com/CVE-2018-9242
CVE ID: CVE-2018-9243 State: PUBLISHED Published: 2018-04-05T14:00:00 Last Updated: 2024-08-05T07:17:51.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes tabs of merge requests). This is fixed in 10.6.3, 10.5.7, and 10.4.7. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/42028 - https://about.gitlab.com/2018/04/04/security-release-gitlab-10-dot-6-dot-3-released/
CVE ID: CVE-2018-9244 State: PUBLISHED Published: 2018-04-05T14:00:00 Last Updated: 2024-08-05T07:17:52.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a lack of input validation in the milestones component leads to cross site scripting (specifically, data-milestone-id in the milestone dropdown feature). This is fixed in 10.6.3, 10.5.7, and 10.4.7. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/41838 - https://about.gitlab.com/2018/04/04/security-release-gitlab-10-dot-6-dot-3-released/
CVE ID: CVE-2018-9245 State: PUBLISHED Published: 2018-04-22T13:00:00 Last Updated: 2024-08-05T07:17:52.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypass the login page and execute remote code on the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/berkgoksel/99ba5c1f3f9f6e4e33e7ad966c007693 - https://www.exploit-db.com/exploits/44515/
CVE ID: CVE-2018-9246 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T07:17:51.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection via the create(), run_file(), backup(), or restore() function. The vulnerability allows unauthorized users to execute code with the same privileges as the running application. Additional Analyst Notes: - CVE Program Container: References: - https://archive.ledgersmb.org/ledger-smb-announce/msg00280.html
CVE ID: CVE-2018-9247 State: PUBLISHED Published: 2018-04-04T00:00:00 Last Updated: 2024-08-05T07:17:52.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The upsql function in \Lib\Lib\Action\Admin\DataAction.class.php in Gxlcms QY v1.0.0713 allows remote attackers to execute arbitrary SQL statements via the sql parameter. Consequently, an attacker can execute arbitrary PHP code by placing it after a <?php substring, and then using INTO OUTFILE with a .php filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-getshell/index.html
CVE ID: CVE-2018-9248 State: PUBLISHED Published: 2018-04-04T15:00:00 Last Updated: 2024-08-05T07:17:52.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44413/ - https://gist.github.com/pak0s/cd7ac9c2ee659138816f92693d2df602
CVE ID: CVE-2018-9249 State: PUBLISHED Published: 2018-04-04T15:00:00 Last Updated: 2024-08-05T07:17:51.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass by ignoring the parent.location='login.html' JavaScript code in the response to an unauthenticated request. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/pak0s/cd7ac9c2ee659138816f92693d2df602
CVE ID: CVE-2018-9250 State: PUBLISHED Published: 2018-05-18T14:00:00 Last Updated: 2024-08-05T07:17:52.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlistname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openemr/openemr/pull/1578 - https://github.com/openemr/openemr/commit/2a5dd0601e1f616251006d7471997ecd7aaf9651
CVE ID: CVE-2018-9251 State: PUBLISHED Published: 2018-04-04T02:00:00 Last Updated: 2024-08-05T07:17:51.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=794914 - https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html
CVE ID: CVE-2018-9252 State: PUBLISHED Published: 2018-04-04T02:00:00 Last Updated: 2024-08-05T07:17:51.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mdadams/jasper/issues/173 - https://www.oracle.com/security-alerts/cpuapr2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
CVE ID: CVE-2018-9256 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was addressed in epan/dissectors/packet-lwapp.c by limiting the encapsulation levels to restrict the recursion depth. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14467 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dac48f148538c706c446e5105d84ebcb54587528 - https://www.wiresh
wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=dac48f148538c706c446e5105d84ebcb54587528 - https://www.wireshark.org/security/wnpa-sec-2018-20.html
CVE ID: CVE-2018-9257 State: PUBLISHED Published: 2018-04-04T07:00:00Z Last Updated: 2024-09-16T17:58:44.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d7a9501b0439a5dbf24016a95b4896170d789dc2 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14530 - https://www.wireshark.org/security/wnpa-sec-2018-22.html
CVE ID: CVE-2018-9258 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:52.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by preserving valid data sources. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2d4695de1477df60b0188fd581c0c279db601978 - https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html - https://www.wireshark.org/security/wnpa-sec-2018-21.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14472
CVE ID: CVE-2018-9259 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:52.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2113179835b37549f245ac7c05ff2b96276893e4 - https://www.wireshark.org/security/wnpa-sec-2018-15.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13777 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.ht
s://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13777 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html
CVE ID: CVE-2018-9260 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This was addressed in epan/dissectors/packet-ieee802154.c by ensuring that an allocation step occurs. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=14d6f717d8ea27688af48532edb1d29f502ea8f0 - https://www.wireshark.org/security/wnpa-sec-2018-17.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://lists.debian.org/debian-
sec-2018-17.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14468
CVE ID: CVE-2018-9261 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14471 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=66bc372716e04d6a8afdf6712583c9b5d11fee55 - https://www.debian.org/security/2018/dsa-4217 - https
hark.git%3Ba=commit%3Bh=66bc372716e04d6a8afdf6712583c9b5d11fee55 - https://www.debian.org/security/2018/dsa-4217 - https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html - https://www.wireshark.org/security/wnpa-sec-2018-18.html
CVE ID: CVE-2018-9262 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-19.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14469 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f05c3b91f957
ts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f05c3b91f9571210b86576ee6284e71a3306109d
CVE ID: CVE-2018-9263 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:52.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was addressed in epan/dissectors/packet-kerberos.c by ensuring a nonzero key length. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4fe65168fd0de81306710330aa414f10f53cbdf0 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14576 - https://www.wireshark.org/security/wnpa-sec-2018-23.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00
- https://www.wireshark.org/security/wnpa-sec-2018-23.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html
CVE ID: CVE-2018-9264 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-adb.c by checking for a length inconsistency. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4217 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=0290a62be0fca8da9bb190f59dc1fe26c1d65024 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14460 - https://www.wireshark.org/security/wnpa
f59dc1fe26c1d65024 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14460 - https://www.wireshark.org/security/wnpa-sec-2018-16.html
CVE ID: CVE-2018-9265 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:52.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14480 - https://www.wireshark.org/security/wnpa-sec-2018-24.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b12cc581cd4878d74b6116ca02c7dbe650c1f242
CVE ID: CVE-2018-9266 State: PUBLISHED Published: 2018-04-04T07:00:00Z Last Updated: 2024-09-16T16:57:48.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-24.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14481 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9d3714e767cb104dcfa1647935fa5960b16bb8e1
CVE ID: CVE-2018-9267 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8ed057f7faa709dbde34b91f0715a957837f74d9 - https://www.wireshark.org/security/wnpa-sec-2018-24.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14482
CVE ID: CVE-2018-9268 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:52.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14483 - https://www.wireshark.org/security/wnpa-sec-2018-24.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c69d710d2bf39fe633800db65efddf55701131b6 - https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html
CVE ID: CVE-2018-9269 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e19aba33026212cbe000ece633adf14d109489fa - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14484 - https://www.wireshark.org/security/wnpa-sec-2018-24.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html
CVE ID: CVE-2018-9270 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:52.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14485 - https://www.wireshark.org/security/wnpa-sec-2018-24.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=0fbc50f9b9219be54d6db47f04b65af19696a7c7 - https://lists.debian.org/debian-lts-announce/2018/05/msg00019.html
CVE ID: CVE-2018-9271 State: PUBLISHED Published: 2018-04-04T07:00:00Z Last Updated: 2024-09-16T17:28:32.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14486 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5b0228945dc74ee82d2ab4a4e7af2bdfe7b75910 - https://www.wireshark.org/security/wnpa-sec-2018-24.html
CVE ID: CVE-2018-9272 State: PUBLISHED Published: 2018-04-04T07:00:00Z Last Updated: 2024-09-17T03:22:40.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6e3b90824a82724f445a0374e99f0b76e4cf5e8b - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14487 - https://www.wireshark.org/security/wnpa-sec-2018-24.html
CVE ID: CVE-2018-9273 State: PUBLISHED Published: 2018-04-04T07:00:00 Last Updated: 2024-08-05T07:17:51.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4217 - https://www.wireshark.org/security/wnpa-sec-2018-24.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1f8f1456f1e73b6c09e50a64749e43413ac12df7 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14488
CVE ID: CVE-2018-9274 State: PUBLISHED Published: 2018-04-04T07:00:00Z Last Updated: 2024-09-16T19:52:27.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=211845aba4794720ae265c782cdffddae54a3e7a - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f38e895dfc0d97bce64f73ce99df706911d9aa07 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14489 - https://www.wireshark.org/security/wnpa-sec-2018-24.html
CVE ID: CVE-2018-9275 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-17T04:23:59.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.opensuse.org/show_bug.cgi?id=1088027 - https://github.com/Yubico/yubico-pam/commit/0f6ceabab0a8849b47f67d727aa526c2656089ba - https://github.com/Yubico/yubic
- https://github.com/Yubico/yubico-pam/commit/0f6ceabab0a8849b47f67d727aa526c2656089ba - https://github.com/Yubico/yubico-pam/issues/136
CVE ID: CVE-2018-9276 State: PUBLISHED Published: 2018-07-02T16:00:00.000Z Last Updated: 2025-10-21T23:45:50.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/148334/PRTG-Command-Injection.html - https://www.exploit-db.com/exp