Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7640 State: PUBLISHED Published: 2018-03-02T14:00:00 Last Updated: 2024-08-05T06:31:05.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a Monochrome case, aka case 1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dtschump/CImg/issues/185 - https://lists.debian.org/debian-lts-announce/2019/09/msg00030.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00033.html
CVE ID: CVE-2018-7641 State: PUBLISHED Published: 2018-03-02T14:00:00 Last Updated: 2024-08-05T06:31:04.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dtschump/CImg/issues/185 - https://lists.debian.org/debian-lts-announce/2019/09/msg00030.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00033.html
CVE ID: CVE-2018-7642 State: PUBLISHED Published: 2018-03-02T15:00:00 Last Updated: 2024-08-05T06:31:05.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (aout_32_swap_std_reloc_out NULL pointer dereference and application crash) via a crafted ELF file, as demonstrated by objcopy. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=116acb2c268c89c89186673a7c92620d21825b25 - https://access.redhat.com/errata/RHSA-2018:30
tweb.cgi?p=binutils-gdb.git%3Bh=116acb2c268c89c89186673a7c92620d21825b25 - https://access.redhat.com/errata/RHSA-2018:3032 - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22887 - https://access.redhat.com/errata/RHBA-2019:0327 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
CVE ID: CVE-2018-7643 State: PUBLISHED Published: 2018-03-02T15:00:00 Last Updated: 2024-08-05T06:31:05.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103264 - https://access.redhat.com/errata/RHSA-2018:3032 - https://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22905 - https://access.redha
ttps://security.gentoo.org/glsa/201811-17 - https://sourceware.org/bugzilla/show_bug.cgi?id=22905 - https://access.redhat.com/errata/RHBA-2019:0327 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
CVE ID: CVE-2018-7644 State: PUBLISHED Published: 2018-03-05T14:00:00 Last Updated: 2024-08-05T06:31:05.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue. Additional Analyst Notes: - CVE Program Container: References: - https://simplesamlphp.org/security/201802-01
CVE ID: CVE-2018-7648 State: PUBLISHED Published: 2018-03-02T16:00:00 Last Updated: 2024-08-05T06:31:05.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/1088 - https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d
CVE ID: CVE-2018-7649 State: PUBLISHED Published: 2018-08-02T17:00:00 Last Updated: 2024-08-05T06:31:05.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monitorix before 3.10.1 allows XSS via CGI variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.monitorix.org/changelog.html
CVE ID: CVE-2018-7650 State: PUBLISHED Published: 2018-03-06T15:00:00 Last Updated: 2024-08-05T06:31:04.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript code to the user's browser. This is different from CVE-2018-6878. Additional Analyst Notes: - CVE Program Container: References: - https://neetech18.blogspot.in/2018/03/stored-xss-vulnerability-in-hot-scripts.html
CVE ID: CVE-2018-7651 State: PUBLISHED Published: 2018-03-04T01:00:00Z Last Updated: 2024-09-16T22:25:51.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zkat/ssri/commit/d0ebcdc22cb5c8f47f89716d08b3518b2485d65d - https://github.com/zkat/ssri/issues/10 - https://nodesecurity.io/advisories/565
CVE ID: CVE-2018-7652 State: PUBLISHED Published: 2018-03-04T01:00:00Z Last Updated: 2024-09-16T17:23:46.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dotse/zonemaster-gui/pull/218 - https://github.com/dotse/zonemaster-gui/releases/tag/v1.0.11 - https://github.com/dotse/zonemaster-gui/commit/568e8db44930fda4563c1e708a2440909fd8e5fe - https://github.com/dotse/zonemaster-gui/issues/217
CVE ID: CVE-2018-7653 State: PUBLISHED Published: 2018-03-04T19:00:00 Last Updated: 2024-08-05T06:31:05.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/147065/YzmCMS-3.6-Cross-Site-Scripting.html - https://github.com/ponyma233/YzmCMS/blob/master/YzmCMS_3.6_bug.md - https://www.exploit-db.com/exploits/44405/
CVE ID: CVE-2018-7654 State: PUBLISHED Published: 2018-03-04T01:00:00Z Last Updated: 2024-09-17T02:42:38.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access to files on the server via path traversal. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/path-traversal-in-3cx-7421a8ffdb7a - http://www.rootlabs.com.br/path-traversal-in-3cx/
CVE ID: CVE-2018-7658 State: PUBLISHED Published: 2018-03-26T21:00:00 Last Updated: 2024-08-05T06:31:05.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service (daemon crash) by sending exactly 11 bytes. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/146645/Softros-Network-Time-System-Server-2.3.4-Denial-Of-Service.html - https://www.exploit-db.com/exploits/44255/
CVE ID: CVE-2018-7659 State: PUBLISHED Published: 2018-04-11T06:00:00 Last Updated: 2024-08-05T06:31:05.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via a filename of an uploaded image file. Additional Analyst Notes: - CVE Program Container: References: - https://vipinxsec.blogspot.com/2018/04/stored-xss-in-documentum-d2-steps-to.html
CVE ID: CVE-2018-7660 State: PUBLISHED Published: 2018-04-11T06:00:00 Last Updated: 2024-08-05T06:31:05.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the servlet/Download _docbase or _username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://vipinxsec.blogspot.com/2018/04/reflected-xss-in-documentum-d2.html
CVE ID: CVE-2018-7661 State: PUBLISHED Published: 2018-03-04T22:00:00 Last Updated: 2024-08-05T06:31:05.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain requests to TCP ports 8258 and 8257. Additional Analyst Notes: - CVE Program Container: References: - https://blog.manchestergreyhats.co.uk/2018/02/25/eavesdropping-on-wifi-baby-monitor/ - https://www.exploit-db.com/exploits/442322/
CVE ID: CVE-2018-7662 State: PUBLISHED Published: 2018-03-04T23:00:00Z Last Updated: 2024-09-16T19:56:44.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CouchCMS/CouchCMS/issues/46
CVE ID: CVE-2018-7663 State: PUBLISHED Published: 2018-03-05T07:00:00 Last Updated: 2024-08-05T06:31:05.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25. An unescaped template literal in the bio field of a user profile (resources/views/layouts/app.blade.php) allows for server-side template injection of arbitrary JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/voten-co/voten/commit/ee6a322568166e28465da075159a6d4adbf74d53 - https://github.com/spencerdodd/public-writeups/blob/master/CVE-2018-7663/README.md
CVE ID: CVE-2018-7664 State: PUBLISHED Published: 2018-03-05T07:00:00 Last Updated: 2024-08-05T06:31:05.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacters in the file_name parameter to /api/file_uploader.php or /actions/file_downloader.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openwall.net/full-disclosure/2018/02/27/1 - https://www.sec-consult.com/en/blog/advisories/os-command-injection-arbitrary-file-upload-sql-injection-in-clipbucket/index.html
CVE ID: CVE-2018-7665 State: PUBLISHED Published: 2018-03-05T07:00:00 Last Updated: 2024-08-05T06:31:05.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_uploader.php or actions/photo_uploader.php, or the coverPhoto parameter to edit_account.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openwall.net/full-disclosure/2018/02/27/1 - https://www.sec-consult.com/en/blog/advisories/os-command-injection-arbitrary-file-upload-sql-injection-in-clipbucket/index.html
CVE ID: CVE-2018-7666 State: PUBLISHED Published: 2018-03-05T07:00:00 Last Updated: 2024-08-05T06:31:05.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vote_channel.php channelId parameter, the ajax/commonAjax.php email parameter, and the ajax/commonAjax.php username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openwall.net/full-disclosure/2018/02/27/1 - https://www.sec-consult.com/en/blog/advisories/os-command-injection-arbitrary-file-upload-sql-injection-in-clipbucket/index.html
CVE ID: CVE-2018-7667 State: PUBLISHED Published: 2018-03-05T07:00:00 Last Updated: 2024-08-05T06:31:05.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adminer through 4.3.1 has SSRF via the server parameter. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt - https://lists.debian.org/debian-lts-announce/2018/03/msg00014.html
CVE ID: CVE-2018-7668 State: PUBLISHED Published: 2018-03-05T07:00:00 Last Updated: 2024-08-05T06:31:05.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openwall.net/full-disclosure/2018/02/28/1
CVE ID: CVE-2018-7669 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-05T06:31:04.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&file= URI. Validation is performed to ensure that the text passed to the 'file' parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a tra
o the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional 'dot dot' style attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45152/ - http://seclists.org/fulldisclosure/2018/Apr/47 - https://kb.sitecore.net/articles/356221
CVE ID: CVE-2018-7673 State: PUBLISHED Published: 2018-03-26T19:00:00 Last Updated: 2024-08-05T06:31:05.114Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NetIQ Products: Identity Manager Problem Types: The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attacks. Description: The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html - http://www.securityfocus.com/bid/103533
CVE ID: CVE-2018-7674 State: PUBLISHED Published: 2018-03-28T14:00:00 Last Updated: 2024-08-05T06:31:05.078Z Severity: LOW (CVSS 2.1 CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: NetIQ Products: Identity Manager Problem Types: The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection. Description: The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html
CVE ID: CVE-2018-7675 State: PUBLISHED Published: 2018-03-07T22:00:00 Last Updated: 2024-08-05T06:31:05.057Z Severity: LOW (CVSS 2.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: NetIQ Corporation Products: Sentinel Problem Types: Potential information leakage Description: In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If another user is passing by and decides to login, their credentials are accepted. While The user does not inherit any of
another user is passing by and decides to login, their credentials are accepted. While The user does not inherit any of the other users privileges, they are able to view the previous screen. In this case it is possible that the user can see another users events or configuration information for whatever view is currently showing. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/support/kb/doc.php?id=7022706
CVE ID: CVE-2018-7676 State: PUBLISHED Published: 2018-03-28T14:00:00 Last Updated: 2024-08-05T06:31:05.092Z Severity: LOW (CVSS 3.9 CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: NetIQ Products: Identity Manager Problem Types: The NetIQ Identity Manager , in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information. Description: The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html
CVE ID: CVE-2018-7677 State: PUBLISHED Published: 2018-03-14T15:00:00 Last Updated: 2024-08-05T06:31:05.048Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: NetIQ Products: NetIQ Access Manager (NAM) Admin Console Problem Types: CSRF Description: A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/support/kb/doc.php?id=7022725 - http://www.securityfocus.com/bid/103420
CVE ID: CVE-2018-7678 State: PUBLISHED Published: 2018-03-14T15:00:00 Last Updated: 2024-08-05T06:31:05.113Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: NetIQ Products: NetIQ Access Manager (NAM) Admin Console Problem Types: XSS Description: A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/support/kb/doc.php?id=7022724 - http://www.securityfocus.com/bid/103421
CVE ID: CVE-2018-7679 State: PUBLISHED Published: 2018-06-21T19:00:00Z Last Updated: 2024-09-17T00:15:29.713Z Vendors: Micro Focus Products: Solutions Business Manager 11.4 Problem Types: Client-side remote code execution Description: Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
CVE ID: CVE-2018-7680 State: PUBLISHED Published: 2018-06-21T19:00:00Z Last Updated: 2024-09-16T20:36:24.163Z Vendors: Micro Focus Products: Solutions Business Manager 11.4 Problem Types: Reflected cross-site scripting Description: Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
CVE ID: CVE-2018-7681 State: PUBLISHED Published: 2018-06-21T19:00:00Z Last Updated: 2024-09-17T02:27:04.569Z Vendors: Micro Focus Products: Solutions Business Manager 11.4 Problem Types: Reflected cross-site scripting Description: Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
CVE ID: CVE-2018-7682 State: PUBLISHED Published: 2018-06-22T22:00:00Z Last Updated: 2024-09-16T23:31:36.175Z Vendors: Micro Focus Products: Solutions Business Manager 11.4 Problem Types: Cross-site Request Forgery Description: Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
CVE ID: CVE-2018-7683 State: PUBLISHED Published: 2018-06-21T19:00:00Z Last Updated: 2024-09-17T01:30:46.785Z Vendors: Micro Focus Products: Solutions Business Manager 11.4 Problem Types: Information Disclosure Description: Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
CVE ID: CVE-2018-7685 State: PUBLISHED Published: 2018-08-31T15:00:00Z Last Updated: 2024-09-17T00:52:15.696Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SUSE Products: libzypp Problem Types: CWE-358 Description: The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1091624 - https://www.suse.com/de-de/security/cve/CVE-2018-7
er: References: - https://bugzilla.suse.com/show_bug.cgi?id=1091624 - https://www.suse.com/de-de/security/cve/CVE-2018-7685/ - http://lists.suse.com/pipermail/sle-security-updates/2018-August/004510.html
CVE ID: CVE-2018-7686 State: PUBLISHED Published: 2018-08-09T21:00:00Z Last Updated: 2024-09-17T03:43:00.322Z Vendors: Micro Focus Products: eDirectory (ZDI) Problem Types: Information Leakage. Description: Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/edirectory-91/edirectory9111_releasenotes/data/edirectory9111_releasenotes.html
CVE ID: CVE-2018-7687 State: PUBLISHED Published: 2018-05-21T20:00:00Z Last Updated: 2024-09-16T22:36:42.898Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Client for Open Enterprise Server Problem Types: Elevation of privilege via buffer overflow. Description: The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022983 - https://bugzilla.novell.com/show_bug.cgi?id=1093607