Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-18559 State: PUBLISHED Published: 2018-10-22T16:00:00 Last Updated: 2024-08-05T11:16:00.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter contro
packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:0188 - https://access.redhat.com/errata/RHSA-2019:0163 - https://blogs.securiteam.com/index.php/archives/3731 - https://access.redhat.com/errata/RHBA-2019:0327 - https://access.redhat.com/errata/RHSA-2019:1170 - https://access.redhat.com/errata/RHSA-2019:1190 - https://access.redhat.com/errata/RHSA-2019:3967 - https://access.redhat.com/errata/RHSA-2019:4159 - https://access.redhat.com/errata/RHSA-2020:0174
CVE ID: CVE-2018-18561 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:15:59.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. Insecure permissions in a service interface may allow authenticated attackers in the adjacent network to execute arbitrary commands on the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01 - http://www.securityfocus.com/bid/105843
CVE ID: CVE-2018-18562 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:15:59.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. Weak access credentials may enable attackers in the adjacent network to gain unauthorized service access via a service interface. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01 - http://www.securityfocus.com/bid/105843
CVE ID: CVE-2018-18563 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:16:00.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial Number below KQ0400000 or KS0400000) and cobas h 232 before 04.00.04 (Serial Number above KQ0400000 or KS0400000). Improper access control to a service command allows attackers in the adjacent network to execute arbitrary code on
00). Improper access control to a service command allows attackers in the adjacent network to execute arbitrary code on the system through a crafted Poct1-A message. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01 - http://www.securityfocus.com/bid/105843
CVE ID: CVE-2018-18564 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:15:59.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). Improper access control allows attackers in the adjacent network to change the instrument configuration. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01 - http://www.securityfocus.com/
Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01 - http://www.securityfocus.com/bid/105843
CVE ID: CVE-2018-18565 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:15:59.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial number below KQ0400000 or KS0400000), and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). A vulnerability in the software update mechanism allows authenticated attackers in the adjacent network to overwri
000). A vulnerability in the software update mechanism allows authenticated attackers in the adjacent network to overwrite arbitrary files on the system through a crafted update package. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01 - http://www.securityfocus.com/bid/105843
CVE ID: CVE-2018-18566 State: PUBLISHED Published: 2018-10-24T22:00:00 Last Updated: 2024-08-05T11:15:59.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-028.txt - http://www.securityfocus.com/bid/105746 - https://seclists.org/bugtraq/2018/Oct/33
CVE ID: CVE-2018-18567 State: PUBLISHED Published: 2018-10-24T22:00:00 Last Updated: 2024-08-05T11:15:59.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041956 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-026.txt - https://seclists.org/bugtraq/2018/Oct/32
CVE ID: CVE-2018-18568 State: PUBLISHED Published: 2018-10-24T22:00:00 Last Updated: 2024-08-05T11:15:59.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-027.txt - https://seclists.org/bugtraq/2018/Oct/36
CVE ID: CVE-2018-18569 State: PUBLISHED Published: 2019-02-11T21:00:00 Last Updated: 2024-08-05T11:15:59.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests (with certain restrictions) that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. This could be leveraged to provide a proxy to attack other servers (internal or external) or to perform network scans of external or internal networks. Additional Analyst Notes: - CVE Program Container: References: - https://www.shore
ans of external or internal networks. Additional Analyst Notes: - CVE Program Container: References: - https://www.shorebreaksecurity.com/blog/ssrfs-up-real-world-server-side-request-forgery-ssrf/
CVE ID: CVE-2018-18570 State: PUBLISHED Published: 2019-07-29T22:33:47 Last Updated: 2024-08-05T11:15:59.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Planon before Live Build 41 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www2.deloitte.com/de/de/pages/risk/articles/planon-cross-site-scripting.html
CVE ID: CVE-2018-18571 State: PUBLISHED Published: 2019-06-05T14:53:57 Last Updated: 2024-08-05T11:15:59.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management (MAM) enrolled device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108081 - https://support.citrix.com/article/CTX247736
CVE ID: CVE-2018-18572 State: PUBLISHED Published: 2019-08-22T14:33:07 Last Updated: 2024-08-05T11:15:59.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Because of this filter, script files with certain PHP-related extensions (such as .phtml and .php5) didn't execute in the application. But this filter didn't prevent the '.pht' extension. Thus, remote authenticated administrators can upload '.pht' files for arbitrary PHP code execution via a /catalog/admin/categories.php?cPath=&action=new_product URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.c
ies.php?cPath=&action=new_product URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osCommerce/oscommerce2/issues/631
CVE ID: CVE-2018-18573 State: PUBLISHED Published: 2019-08-22T14:34:51 Last Updated: 2024-08-05T11:15:59.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Remote authenticated administrators can upload new '.htaccess' files (e.g., omitting .php) and subsequently achieve arbitrary PHP code execution via a /catalog/admin/categories.php?cPath=&action=new_product URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osCommerce/oscommerce2/issues/631
CVE ID: CVE-2018-18576 State: PUBLISHED Published: 2020-03-17T14:18:03 Last Updated: 2024-08-05T11:15:59.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/admin/dashboard/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wordpress-popup/#developers - https://pastebin.com/ndDJT3d3
CVE ID: CVE-2018-18578 State: PUBLISHED Published: 2018-10-22T21:00:00Z Last Updated: 2024-09-17T04:04:40.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ky-j/dedecms/files/2500328/Reflected.XSS.Vulnerability.exists.in.the.file.of.DedeCMS.V5.docx - https://github.com/ky-j/dedecms/issues/5
CVE ID: CVE-2018-18579 State: PUBLISHED Published: 2018-10-22T21:00:00Z Last Updated: 2024-09-16T17:48:20.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ky-j/dedecms/issues/6 - https://github.com/ky-j/dedecms/files/2501671/Reflected.XSS.Vulnerability.exists.in.the.file.of.DedeCMS.V5.7sp2.docx
CVE ID: CVE-2018-18581 State: PUBLISHED Published: 2018-10-22T22:00:00 Last Updated: 2024-08-05T11:15:59.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jansol/LuPng/issues/7 - https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-internalprintf
CVE ID: CVE-2018-18582 State: PUBLISHED Published: 2018-10-22T22:00:00 Last Updated: 2024-08-05T11:15:59.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-insertbyte59837 - https://github.com/jansol/LuPng/issues/9
CVE ID: CVE-2018-18583 State: PUBLISHED Published: 2018-10-22T22:00:00 Last Updated: 2024-08-05T11:15:59.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-insertbyte57755 - https://github.com/jansol/LuPng/issues/8
CVE ID: CVE-2018-18584 State: PUBLISHED Published: 2018-10-23T00:00:00 Last Updated: 2024-08-05T11:15:59.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/911640 - https://www.cabextract.org.uk/#changes - https://usn.ubuntu.com/3814-3/ - https://usn.ubuntu.com/3814-1/ - https://usn.ubuntu.com/3814-2/ - https://www.openwall.com/lists/oss-security/2018/10/22/1 - https://lists.debian.org/debian-lts-announce/20
com/3814-2/ - https://www.openwall.com/lists/oss-security/2018/10/22/1 - https://lists.debian.org/debian-lts-announce/2018/10/msg00017.html - https://github.com/kyz/libmspack/commit/40ef1b4093d77ad3a5cfcee1f5cb6108b3a3bcc2 - https://security.gentoo.org/glsa/201903-20 - https://access.redhat.com/errata/RHSA-2019:2049 - https://www.starwindsoftware.com/security/sw-20181213-0001/
CVE ID: CVE-2018-18585 State: PUBLISHED Published: 2018-10-23T00:00:00 Last Updated: 2024-08-05T11:15:59.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name). Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3814-3/ - https://usn.ubuntu.com/3814-1/ - https://usn.ubuntu.com/3814-2/ - https://github.com/kyz/libmspack/commit/8759da8db6ec9e866cb8eb143313f397f925bb4f - https://www.openwall.com/lists/oss-security/2018/10/22/1 - https://lists.debian.org/debian-lts-announce/2018/10/msg00017.html -
www.openwall.com/lists/oss-security/2018/10/22/1 - https://lists.debian.org/debian-lts-announce/2018/10/msg00017.html - https://bugs.debian.org/911637 - https://security.gentoo.org/glsa/201903-20 - https://access.redhat.com/errata/RHSA-2019:2049 - https://www.starwindsoftware.com/security/sw-20181213-0002/
CVE ID: CVE-2018-18586 State: PUBLISHED Published: 2018-10-23T02:00:00 Last Updated: 2024-08-05T11:15:59.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kyz/libmspack/commit/7cadd489698be117c47efcadd742651594429e6d - https://www.openwall.com/lists/
es: - https://github.com/kyz/libmspack/commit/7cadd489698be117c47efcadd742651594429e6d - https://www.openwall.com/lists/oss-security/2018/10/22/1 - https://bugs.debian.org/911639 - https://security.gentoo.org/glsa/201903-20
CVE ID: CVE-2018-18587 State: PUBLISHED Published: 2018-10-23T12:00:00Z Last Updated: 2024-09-17T00:11:56.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash. Additional Analyst Notes: - CVE Program Container: References: - https://forums.appgini.com/phpbb/viewtopic.php?f=11&t=2592
CVE ID: CVE-2018-18589 State: PUBLISHED Published: 2018-10-23T17:00:00Z Last Updated: 2024-09-16T19:05:44.031Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Micro Focus Products: Microfocus Real User Monitoring Problem Types: Remote Arbitrary Code Execution Description: A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9.40 and 9.50. The vulnerability could be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03272900
CVE ID: CVE-2018-18590 State: PUBLISHED Published: 2018-11-07T16:00:00Z Last Updated: 2024-09-17T01:15:29.620Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Micro Focus Products: Operation Bridge Containerized Suite Problem Types: Remote Code Execution, Remote Disclosure of Information Description: A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetse
itional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03283416
CVE ID: CVE-2018-18591 State: PUBLISHED Published: 2018-11-13T13:00:00Z Last Updated: 2024-09-17T01:56:18.568Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Micro Focus Products: Micro Focus Service Manager Problem Types: Unauthorized Disclosure of Data Description: A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/
t Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176
CVE ID: CVE-2018-18593 State: PUBLISHED Published: 2018-12-31T15:00:00Z Last Updated: 2024-09-16T18:09:18.629Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Micro Focus Products: UCMDB Configuration Management Service Problem Types: Remote Directory Traversal and Remote Disclosure of Privileged Information Description: Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Director
10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106374 - https://softwaresupport.softwaregrp.com/doc/KM03309650
CVE ID: CVE-2018-18599 State: PUBLISHED Published: 2018-10-23T16:00:00Z Last Updated: 2024-09-16T18:14:19.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stegdetect through 2018-05-26 has an out-of-bounds write in f5_compress in the f5.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/abeluck/stegdetect/issues/10
CVE ID: CVE-2018-18600 State: PUBLISHED Published: 2018-12-31T16:00:00.000Z Last Updated: 2025-05-06T18:23:40.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/
CVE ID: CVE-2018-18601 State: PUBLISHED Published: 2018-12-31T16:00:00.000Z Last Updated: 2025-05-06T18:22:44.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/
CVE ID: CVE-2018-18602 State: PUBLISHED Published: 2018-12-31T16:00:00.000Z Last Updated: 2025-05-06T16:12:40.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/
CVE ID: CVE-2018-18603 State: PUBLISHED Published: 2018-10-23T16:00:00 Last Updated: 2024-08-05T11:15:59.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: 360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement, followed by os.system("CMD") or os.system("PowerShell"), within a .py file. NOTE: the vendor's position is that this cannot be categorized as a vulnerability, although it is a security-related issue Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandboxescape/360-3.5.0.1033-Sandbox-Escape-Exploit/
CVE ID: CVE-2018-18605 State: PUBLISHED Published: 2018-10-23T17:00:00 Last Updated: 2024-08-05T11:15:59.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105754 - https://sourceware.org/git/gitw
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105754 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=ab419ddbb2cdd17ca83618990f2cacf904ce1d61 - https://security.netapp.com/advisory/ntap-20190307-0003/ - https://sourceware.org/bugzilla/show_bug.cgi?id=23804 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html - https://usn.ubuntu.com/4336-1/