Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1000552 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trovebox version <= 4.0.0-rc6 contains a SQL Injection vulnerability in album component that can result in SQL code injection. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed. Additional Analyst Notes: - CVE Program Container: References: - https://telekomsecurity.github.io/2018/04/trovebox-vulnerabilities.html
CVE ID: CVE-2018-1000553 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trovebox version <= 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update internal resources. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed. Additional Analyst Notes: - CVE Program Container: References: - https://telekomsecurity.github.io/2018/04/trovebox-vulnerabilities.html
CVE ID: CVE-2018-1000554 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trovebox version <= 4.0.0-rc6 contains a Unsafe password reset token generation vulnerability in user component that can result in Password reset. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed. Additional Analyst Notes: - CVE Program Container: References: - https://telekomsecurity.github.io/2018/04/trovebox-vulnerabilities.html
CVE ID: CVE-2018-1000555 State: REJECTED Published: 2018-06-25T13:00:00 Last Updated: 2018-06-25T12:57:01 Description: No description available.
CVE ID: CVE-2018-1000556 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacker must craft an URL with payload and send to the user. Victim need to open the link to be affected by reflected XSS. . Additional Analyst Notes: - CVE Program Container: References: - https://www.pluginvulnerabilities.com/2017/04/
d XSS. . Additional Analyst Notes: - CVE Program Container: References: - https://www.pluginvulnerabilities.com/2017/04/28/reflected-cross-site-scripting-xss-vulnerability-in-wp-statistics/
CVE ID: CVE-2018-1000557 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.secuvera.de/advisories/secuvera-SA-2017-03
Additional Analyst Notes: - CVE Program Container: References: - https://www.secuvera.de/advisories/secuvera-SA-2017-03.txt - https://www.ocsinventory-ng.org/en/ocs-inventory-server-2-4-1-has-been-released/
CVE ID: CVE-2018-1000558 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An authenticated attacker is able to gain full access to data stored within database. This attack appear to be exploitable via By sending crafted requests it is possible to gain database access. This vulnerability appears to have been fixed in 2.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.ocsinventory-ng.org/en/ocs-inventory-server-2-4-1-has-
Analyst Notes: - CVE Program Container: References: - https://www.ocsinventory-ng.org/en/ocs-inventory-server-2-4-1-has-been-released/ - https://www.secuvera.de/advisories/secuvera-SA-2017-04.txt
CVE ID: CVE-2018-1000559 State: PUBLISHED Published: 2018-06-26T16:00:00 Last Updated: 2024-08-05T12:40:47.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site Scripting (XSS) vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be exploitable via the victim must open a page with a specially crafted <title> attribute, and then open the qute://history site via the :history command. This vulnerability appears to have been fixed in fixed in v1.3.3 (4c9360237f1
e://history site via the :history command. This vulnerability appears to have been fixed in fixed in v1.3.3 (4c9360237f186681b1e3f2a0f30c45161cf405c7, to be released today) and v1.4.0 (5a7869f2feaa346853d2a85413d6527c87ef0d9f, released later this week). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qutebrowser/qutebrowser/commit/4c9360237f186681b1e3f2a0f30c45161cf405c7 - https://github.com/qutebrowser/qutebrowser/commit/5a7869f2feaa346853d2a85413d6527c87ef0d9f - https://github.com/qutebrowser/qutebrowser/issues/4011
CVE ID: CVE-2018-1000600 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-16T23:01:52.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-915
CVE ID: CVE-2018-1000601 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-16T19:46:57.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenkins master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-440
CVE ID: CVE-2018-1000602 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-16T17:38:52.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-916
CVE ID: CVE-2018-1000603 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-17T03:43:46.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java, JCloudsSlaveTemplate.java, LauncherFactory.java, OpenstackCredentials.java, OpenStackMachineStep.java, SlaveOptions.java, SlaveOptionsDescriptor.java that allows attackers with Overall/Read access to Jenkins to connect to an attac
tions.java, SlaveOptionsDescriptor.java that allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins, and to cause Jenkins to submit HTTP requests to attacker-specified URLs. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-808
CVE ID: CVE-2018-1000604 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-16T20:22:59.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user performs some UI actions. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-906
CVE ID: CVE-2018-1000605 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-16T16:13:54.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any service that Jenkins connects to. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-941
CVE ID: CVE-2018-1000606 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-17T03:59:21.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-819
CVE ID: CVE-2018-1000607 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-16T20:52:28.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: A arbitrary file write vulnerability exists in Jenkins Fortify CloudScan Plugin 1.5.1 and earlier in ArchiveUtil.java that allows attackers able to control rulepack zip file contents to overwrite any file on the Jenkins master file system, only limited by the permissions of the user the Jenkins master process is running as. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-870
CVE ID: CVE-2018-1000608 State: PUBLISHED Published: 2018-06-26T17:00:00 Last Updated: 2024-08-05T12:40:47.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: A exposure of sensitive information vulnerability exists in Jenkins z/OS Connector Plugin 1.2.6.1 and earlier in SCLMSCM.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured password. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-950
CVE ID: CVE-2018-1000609 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-17T03:02:13.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in ConfigurationAsCode.java that allows attackers with Overall/Read access to obtain the YAML export of the Jenkins configuration. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-927
CVE ID: CVE-2018-1000610 State: PUBLISHED Published: 2018-06-26T17:00:00Z Last Updated: 2024-09-17T02:11:28.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in DataBoundConfigurator.java, Attribute.java, BaseConfigurator.java, ExtensionConfigurator.java that allows attackers with access to Jenkins log files to obtain the passwords configured using Configuration as Code Plugin. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-06-25/#SECURITY-929
CVE ID: CVE-2018-1000611 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-16T19:25:02.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting (XSS) vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenConext/OpenConext-engineblock/pull/563/files
CVE ID: CVE-2018-1000612 State: REJECTED Published: 2018-07-09T13:00:00Z Last Updated: 2024-09-16T17:42:49.848Z Description: No description available.
CVE ID: CVE-2018-1000613 State: PUBLISHED Published: 2018-07-09T20:00:00 Last Updated: 2024-11-14T20:37:00.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the c
xploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.html - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists
y/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20190204-0003/ - https://github.com/bcgit/bc-java/commit/4092ede58da51af9a21e4825fbad0d9a3ef5a223#diff-2c06e2edef41db889ee14899e12bd574 - https://github.com/bcgit/bc-java/commit/cd98322b171b15b3f88c5ec871175147893c31e6#diff-148a6c098af0199192d6aede960f45dc - https://www.oracle.com/security-alerts/cpuApr2021.html
CVE ID: CVE-2018-1000614 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-17T00:07:03.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: ONOS ONOS Controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in providers/netconf/alarm/src/main/java/org/onosproject/provider/netconf/alarm/NetconfAlarmTranslator.java that can result in An adversary can remotely launch advanced XXE attacks on ONOS controller without authentication.. This attack appear to be exploitable via crafted protocol message. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.onosproject.org/#/c/18779/ - http://gms.cl0udz.com/ONOS_V
t Notes: - CVE Program Container: References: - https://gerrit.onosproject.org/#/c/18779/ - http://gms.cl0udz.com/ONOS_Vul.pdf
CVE ID: CVE-2018-1000615 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-16T20:16:40.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via a normal switch.. This attack appear to be exploitable via the attacker should be able to control or forge a switch in the network.. Additional Analyst Notes: - CVE Program Container: References: - http://gms.cl0udz.com/OVSDB_DOS.pdf - https://gerrit.onosproject.org/#/c/18926/
CVE ID: CVE-2018-1000616 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-17T01:31:35.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in onos\drivers\utilities\src\main\java\org\onosproject\drivers\utilities\XmlConfigParser.java loadxml() that can result in An adversary can remotely launch XXE attacks on ONOS controller via an OpenConfig Terminal Device.. This attack appear to be exploitable via network connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.onosproject.org/#/c/18894/ - http://gms.cl0udz.com/Openconfig_
es: - CVE Program Container: References: - https://gerrit.onosproject.org/#/c/18894/ - http://gms.cl0udz.com/Openconfig_xxe.pdf
CVE ID: CVE-2018-1000617 State: PUBLISHED Published: 2018-07-09T20:00:00 Last Updated: 2024-08-05T12:40:47.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoS(thread crash).. This attack appear to be exploitable via network connectivity (Remote attack). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104711 - http://gms.cl0udz.com/Floodlight_DoS.pdf
CVE ID: CVE-2018-1000618 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-16T20:38:04.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node. This attack appear to be exploitable via network request. This vulnerability appears to have been fixed in after commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EOSIO/eos/pull/4112
CVE ID: CVE-2018-1000619 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-16T18:54:01.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload addons. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=195h-LirGiIVKxioyusw3SvmLp8BljPxe - https://www.ovidentia.org/modules - https://www.ovidentia.org/index.php?
CVE ID: CVE-2018-1000620 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-16T18:45:19.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eran Hammer cryptiles version 4.1.1 earlier contains a CWE-331: Insufficient Entropy vulnerability in randomDigits() method that can result in An attacker is more likely to be able to brute force something that was supposed to be random.. This attack appear to be exploitable via Depends upon the calling application.. This vulnerability appears to have been fixed in 4.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hapijs/cryptiles/issues/34 - https://github.com/hapijs/cryptiles/issu
rogram Container: References: - https://github.com/hapijs/cryptiles/issues/34 - https://github.com/hapijs/cryptiles/issues/35
CVE ID: CVE-2018-1000621 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-17T00:56:16.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control vulnerability in Websocket configuration that can result in code execution. This impacts ONLY the Mycroft for Linux and "non-enclosure" installs - Mark 1 and Picroft unaffected. This attack appear to be exploitable remote access to the unsecured websocket server. This vulnerability appears to have been fixed in No fix currently available. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Nhoya/MycroftAI
currently available. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Nhoya/MycroftAI-RCE - https://community.mycroft.ai/t/zero-click-remote-code-execution-in-mycroft-ai-vocal-assistant/3930/13
CVE ID: CVE-2018-1000622 State: PUBLISHED Published: 2018-07-09T20:00:00 Last Updated: 2024-08-05T12:40:47.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201812-11 - https://groups.google.com/forum/#%21topic/rustlan
Container: References: - https://security.gentoo.org/glsa/201812-11 - https://groups.google.com/forum/#%21topic/rustlang-security-announcements/4ybxYLTtXuM - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html
CVE ID: CVE-2018-1000623 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-16T21:56:30.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository from Zip" feature, available through the Admin menu -> Import & Export -> Repositories, triggers a vulnerable UI REST endpoint (/ui/artifactimport/upload) that can result in Directory traversal / file overwrite and remote code execution. This attack appear to be exploitable via An attacker with Admin privileges may use the aforementioned UI endpoint and exploit the publicly know
e exploitable via An attacker with Admin privileges may use the aforementioned UI endpoint and exploit the publicly known "Zip Slip" vulnerability, to add/overwrite files outside the target directory. This vulnerability appears to have been fixed in 6.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/RTF/Release+Notes#ReleaseNotes-Artifactory6.0.3
CVE ID: CVE-2018-1000624 State: PUBLISHED Published: 2018-12-28T14:00:00 Last Updated: 2024-08-05T12:40:47.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict access to a sensitive functionality. By visiting http://V2I_HUB/UI/powerdown.php, a remote attacker could exploit this vulnerability to shut down the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/147301