Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10268 State: PUBLISHED Published: 2018-04-21T17:00:00 Last Updated: 2024-08-05T07:32:01.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php avatar parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/karson/fastadmin/issues/IJ7YZ
CVE ID: CVE-2018-10283 State: PUBLISHED Published: 2018-04-21T19:00:00Z Last Updated: 2024-09-16T20:27:38.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action. Additional Analyst Notes: - CVE Program Container: References: - https://lab.insightsecurity.com.br/clickmania-0day-sql-injection-2/
CVE ID: CVE-2018-10284 State: PUBLISHED Published: 2018-04-21T19:00:00Z Last Updated: 2024-09-16T18:44:17.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp eve_cod parameter. Additional Analyst Notes: - CVE Program Container: References: - https://lab.insightsecurity.com.br/g-tickets-sql-injection/
CVE ID: CVE-2018-10285 State: PUBLISHED Published: 2018-04-22T13:00:00 Last Updated: 2024-08-05T07:32:01.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/berkgoksel/b8e15cb5742540c6987e9d837d6fa8b1 - https://www.exploit-db.com/exploits/44515/
CVE ID: CVE-2018-10286 State: PUBLISHED Published: 2018-04-22T13:00:00 Last Updated: 2024-08-05T07:32:01.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests. In order to be able to see the credentials in cleartext, an attacker needs to be authenticated. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/berkgoksel/fde102503c457c0344e2e53b7971437a - https://www.exploit-db.com/exploits/44515/
CVE ID: CVE-2018-10289 State: PUBLISHED Published: 2018-04-22T05:00:00 Last Updated: 2024-09-12T16:36:45.112388 Vendors: n/a Products: n/a Problem Types: n/a Description: In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=699271 - https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html - http://www.ghostscript.com/cgi-bin/findgit.cgi?2e43685dc8a8a886fc9df9b3663cf199404f7637
CVE ID: CVE-2018-10294 State: PUBLISHED Published: 2018-05-02T21:00:00 Last Updated: 2024-08-05T07:32:01.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/3 - http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions
CVE ID: CVE-2018-10295 State: PUBLISHED Published: 2018-04-22T14:00:00 Last Updated: 2024-08-05T07:32:01.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chemcms/ChemCMS/issues/1
CVE ID: CVE-2018-10296 State: PUBLISHED Published: 2018-04-22T14:00:00 Last Updated: 2024-08-05T07:39:07.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/17
CVE ID: CVE-2018-10297 State: PUBLISHED Published: 2018-04-22T15:00:00Z Last Updated: 2024-09-16T17:34:08.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images. Additional Analyst Notes: - CVE Program Container: References: - https://laworigin.github.io/2018/04/22/Discuz-x-portal-Stored-XSS/
CVE ID: CVE-2018-10298 State: PUBLISHED Published: 2018-04-22T15:00:00Z Last Updated: 2024-09-16T18:49:41.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content. Additional Analyst Notes: - CVE Program Container: References: - https://laworigin.github.io/2018/04/22/Discuz-x-portal-Stored-XSS/
CVE ID: CVE-2018-10299 State: PUBLISHED Published: 2018-04-23T04:00:00 Last Updated: 2024-08-05T07:39:06.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two _receivers arguments in conjunction with a large _value argument, as exploited in the wild in April 2018, aka the "batchOverflow" issue. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/secbit-media/a-disastrous-vulnerab
. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/secbit-media/a-disastrous-vulnerability-found-in-smart-contracts-of-beautychain-bec-dbf24ddbc30e - https://twitter.com/OKEx_/status/987967343983714304 - https://www.reddit.com/r/ethereum/comments/8esyg9/okex_erc20_bug/ - https://dasp.co/#item-3 - https://peckshield.com/2018/04/22/batchOverflow/ - https://support.okex.com/hc/en-us/articles/360002944212-BeautyChain-BEC-Withdrawal-and-Trading-Suspended
CVE ID: CVE-2018-10300 State: PUBLISHED Published: 2018-04-23T18:00:00 Last Updated: 2024-08-05T07:39:06.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40squeal/wd-instagram-feed-1-3-0-xss-vulnerabilities-cve-2018-10300-and-cve-2018-10301-7173ffc4c271 - https://wpvulndb.com/vulnerabilities/9393
CVE ID: CVE-2018-10301 State: PUBLISHED Published: 2018-04-23T18:00:00 Last Updated: 2024-08-05T07:39:06.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40squeal/wd-instagram-feed-1-3-0-xss-vulnerabilities-cve-2018-10300-and-cve-2018-10301-7173ffc4c271 - https://wpvulndb.com/vulnerabilities/9393
CVE ID: CVE-2018-10302 State: PUBLISHED Published: 2018-04-23T19:00:00 Last Updated: 2024-08-05T07:39:06.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/advisories/src-2018-0019/ - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-10303 State: PUBLISHED Published: 2018-04-23T23:00:00 Last Updated: 2024-08-05T07:39:07.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/advisories/src-2018-0020/ - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-10305 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:06.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15 does not properly use the possible_users variable in a query, which might allow attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://www.simplemachines.org/community/index.php?topic=557176.0
CVE ID: CVE-2018-10306 State: PUBLISHED Published: 2018-05-18T13:00:00 Last Updated: 2024-08-05T07:39:06.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Services/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class.ilDateTimeInputGUI.php in ILIAS 5.1.x through 5.3.x before 5.3.4 allow XSS via an invalid date. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ILIAS-eLearning/ILIAS/commit/95870b2db3e71154102b2cd2f05334fc741c6e39 - https://www.ilias.de/docu/goto_docu_pg_116799_35.html - https://github.com/ILIAS-eLearning/ILIAS/commit/eb0272c8023818b1eb10a93e115c9e7960b62a62
CVE ID: CVE-2018-10307 State: PUBLISHED Published: 2018-05-18T13:00:00 Last Updated: 2024-08-05T07:39:08.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ILIAS-eLearning/ILIAS/commit/ca982e59d0b76c0374c9a7fd1acf2685ca57cf41 - https://www.ilias.de/docu/goto_docu_pg_116799_35.html
CVE ID: CVE-2018-10309 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:08.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/B0UG/f0cfb356e23be3cd6ebea69566d6100a - https://wpvulndb.com/vulnerabilities/9067 - https://wordpress.org/plugins/responsive-cookie-consent/#developers - https://www.exploit-db.com/exploits/44563/
CVE ID: CVE-2018-10310 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:06.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress that allows the execution of arbitrary HTML/script code in the context of a victim's browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44503/ - http://packetstormsecurity.com/files/147333/WordPress-UK-Cookie-Consent-2.3.9-Cross-Site-Scripting.html - https://wordpress.org/plugins/uk-cookie-consent/#developers - h
ress-UK-Cookie-Consent-2.3.9-Cross-Site-Scripting.html - https://wordpress.org/plugins/uk-cookie-consent/#developers - https://gist.github.com/B0UG/9732614abccaf2893c352d14c822d07b
CVE ID: CVE-2018-10311 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:06.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tag[pinyin] parameter to the /index.php?m=tags&f=index&v=add URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44618/ - https://github.com/wuzhicms/wuzhicms/issues/131
CVE ID: CVE-2018-10312 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:07.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/132 - https://www.exploit-db.com/exploits/44504/
CVE ID: CVE-2018-10313 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:07.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: WUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq_10%5D parameter to the /index.php?m=member&f=index&v=profile&set_iframe=1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44617/ - https://github.com/wuzhicms/wuzhicms/issues/133
CVE ID: CVE-2018-10314 State: PUBLISHED Published: 2018-05-10T03:00:00 Last Updated: 2024-08-05T07:39:07.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the action parameter in the Discover -> Audit Scripts -> List Scripts -> Download section. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/1lUHMAOnbQUfh_yBGdBB1x9n0QdVGeP9Tggu9auqpXNo/edit?usp=sharing - https://www.exploit-db.com/exploits/44613/
CVE ID: CVE-2018-10316 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:08.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm/nasm.c because of a globallineno integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392474 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html
CVE ID: CVE-2018-10318 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:06.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/philippe/FrogCMS/issues/6
CVE ID: CVE-2018-10319 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:06.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/philippe/FrogCMS/issues/7
CVE ID: CVE-2018-10320 State: PUBLISHED Published: 2018-04-24T02:00:00 Last Updated: 2024-08-05T07:39:06.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/philippe/FrogCMS/issues/8
CVE ID: CVE-2018-10321 State: PUBLISHED Published: 2018-04-24T06:00:00 Last Updated: 2024-08-05T07:39:06.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44551/ - https://github.com/philippe/FrogCMS/issues/5
CVE ID: CVE-2018-10322 State: PUBLISHED Published: 2018-04-24T06:00:00 Last Updated: 2024-08-05T07:39:06.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://www.spinics.net/lists/linux-xfs/msg17215.html - https://access.redhat.com/errata/RHSA-2018:2948 - http://www.securityfocus.com/bid/103960 - https://bugzilla.kernel.org/show_bug.cgi
ss.redhat.com/errata/RHSA-2018:2948 - http://www.securityfocus.com/bid/103960 - https://bugzilla.kernel.org/show_bug.cgi?id=199377 - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/4578-1/ - https://usn.ubuntu.com/4579-1/
CVE ID: CVE-2018-10323 State: PUBLISHED Published: 2018-04-24T06:00:00 Last Updated: 2024-08-05T07:39:07.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_bmapi_write NULL pointer dereference) via a crafted xfs image. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://usn.ubuntu.com/3752-3/ - http://www.securityfocus.com/bid/103959 - https://www.spinics.net/lists/linux-xfs/msg17254.html - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.com/3754-1/ - htt
net/lists/linux-xfs/msg17254.html - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.com/3754-1/ - https://bugzilla.kernel.org/show_bug.cgi?id=199423 - https://usn.ubuntu.com/3752-1/ - https://usn.ubuntu.com/4486-1/
CVE ID: CVE-2018-10326 State: PUBLISHED Published: 2018-05-17T19:00:00 Last Updated: 2024-08-05T07:39:07.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10326
CVE ID: CVE-2018-10327 State: PUBLISHED Published: 2018-05-17T19:00:00 Last Updated: 2024-08-05T07:39:07.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cps_config.xml file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10327
CVE ID: CVE-2018-10328 State: PUBLISHED Published: 2018-04-24T06:00:00 Last Updated: 2024-08-05T07:39:07.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream. Additional Analyst Notes: - CVE Program Container: References: - https://rchase.com/downloads/momentum-iot-penetration-test-report.pdf
CVE ID: CVE-2018-10329 State: PUBLISHED Published: 2018-04-24T06:00:00Z Last Updated: 2024-09-16T16:53:15.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/1903
CVE ID: CVE-2018-10330 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10331 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10332 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10333 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10334 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10335 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10336 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10337 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10338 State: REJECTED Published: 2021-01-22T20:09:12 Last Updated: 2021-01-22T20:09:12 Description: No description available.
CVE ID: CVE-2018-10339 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10340 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10341 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10342 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10343 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10344 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10345 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10346 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10347 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10348 State: REJECTED Published: 2021-01-22T20:09:13 Last Updated: 2021-01-22T20:09:13 Description: No description available.
CVE ID: CVE-2018-10349 State: REJECTED Published: 2021-01-22T20:09:14 Last Updated: 2021-01-22T20:09:14 Description: No description available.
CVE ID: CVE-2018-10350 State: PUBLISHED Published: 2018-05-25T15:00:00 Last Updated: 2024-08-05T07:39:08.170Z Vendors: Trend Micro Products: Trend Micro Smart Protection Server (Standalone) Problem Types: SQL Injection RCE Description: A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\_bwlists\_handler.php. Authentication is required in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-4
. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-421/ - https://success.trendmicro.com/solution/1119715
CVE ID: CVE-2018-10351 State: PUBLISHED Published: 2018-05-23T16:00:00 Last Updated: 2024-08-05T07:39:06.251Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: SQL Injection Description: A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRegistration2 class. Authentication is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-415/ - https://success.trendmicro.com/solution/1119349