Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10957 State: PUBLISHED Published: 2018-05-10T02:00:00 Last Updated: 2024-08-05T07:54:36.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/147525/D-Link-DIR-868L-1.12-Cross-Site-Request-Forgery.html
CVE ID: CVE-2018-10958 State: PUBLISHED Published: 2018-05-10T02:00:00 Last Updated: 2024-08-05T07:54:36.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3700-1/ - https://www.debian.org/security/2018/dsa-4238 - https://lists.debian.org/debian-lts-announce/2018/10/msg00012.html - https://security.gentoo.org/glsa/201811-14 - https://lists.debian.org/debian-lts-announce/2018/06/msg00010.html - https://github.com/Exiv2/exiv2/issues/3
201811-14 - https://lists.debian.org/debian-lts-announce/2018/06/msg00010.html - https://github.com/Exiv2/exiv2/issues/302 - https://access.redhat.com/errata/RHSA-2019:2101
CVE ID: CVE-2018-10959 State: PUBLISHED Published: 2019-04-17T14:34:19 Last Updated: 2024-08-05T07:54:36.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch. Additional Analyst Notes: - CVE Program Container: References: - https://hackandpwn.com/cve-2018-10959/ - https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_4.4.267.0_SR6.pdf - https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_N
e_Notes_4.4.267.0_SR6.pdf - https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_5.1.149.0_SR1.pdf - https://www.beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-4-4-sr6.pdf - https://www.beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-5-1.pdf
CVE ID: CVE-2018-10962 State: PUBLISHED Published: 2018-05-10T02:00:00 Last Updated: 2024-08-05T07:54:36.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because mouse_event is not properly considered. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rebol0x6c/2345_mouse_poc
CVE ID: CVE-2018-10963 State: PUBLISHED Published: 2018-05-10T02:00:00 Last Updated: 2024-08-05T07:54:36.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2795 - https://usn.ubuntu.com/3864-1/ - https://www.debian.org/security/2018/dsa-4349 - https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html - https://access.redhat.
org/security/2018/dsa-4349 - https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html - https://access.redhat.com/errata/RHSA-2019:2053
CVE ID: CVE-2018-10966 State: PUBLISHED Published: 2018-06-05T15:00:00 Last Updated: 2024-08-05T07:54:36.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GamerPolls 0.4.6, related to config/environments/all.js and config/initializers/02_passport.js. An attacker can edit the Passport.js contents of the session cookie to contain the ID number of the account they wish to take over, and re-sign it using the hard coded secret. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GamerPolls/gamerpolls.com/pull/56 - https://github.com/GamerPolls/gamerpolls.com/blob/03ccbaf219410e0a45390d0efc12017f08a25282/config/environments/a
ll/56 - https://github.com/GamerPolls/gamerpolls.com/blob/03ccbaf219410e0a45390d0efc12017f08a25282/config/environments/all.js#L58 - https://www.digitalinterruption.com/single-post/2018/06/04/Are-Your-Cookies-Telling-Your-Fortune
CVE ID: CVE-2018-10967 State: PUBLISHED Published: 2018-05-18T14:00:00 Last Updated: 2024-08-05T07:54:35.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on the device with higher privileges, aka remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-18-060
CVE ID: CVE-2018-10968 State: PUBLISHED Published: 2018-05-18T14:00:00 Last Updated: 2024-08-05T07:54:36.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices, aka a backdoor access vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-18-061
CVE ID: CVE-2018-10969 State: PUBLISHED Published: 2018-06-17T16:00:00 Last Updated: 2024-08-05T07:54:36.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation codes grid. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/pie-register/#developers - https://www.exploit-db.com/exploits/44867/
CVE ID: CVE-2018-10971 State: PUBLISHED Published: 2018-05-10T15:00:00 Last Updated: 2024-08-05T07:54:36.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Free Lossless Image Format (FLIF) 0.3. The Plane function in image/image.hpp allows remote attackers to cause a denial of service (attempted excessive memory allocation) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FLIF-hub/FLIF/issues/501
CVE ID: CVE-2018-10972 State: PUBLISHED Published: 2018-05-10T15:00:00 Last Updated: 2024-08-05T07:54:36.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Free Lossless Image Format (FLIF) 0.3. The TransformPaletteC::process function in transform/palette_C.hpp allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FLIF-hub/FLIF/issues/503
CVE ID: CVE-2018-10973 State: PUBLISHED Published: 2018-05-10T17:00:00 Last Updated: 2024-08-05T07:54:36.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted _value parameters. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2018/05/10/2
CVE ID: CVE-2018-10974 State: PUBLISHED Published: 2018-05-10T16:00:00Z Last Updated: 2024-09-16T16:18:24.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222100. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x00222100
CVE ID: CVE-2018-10975 State: PUBLISHED Published: 2018-05-10T16:00:00Z Last Updated: 2024-09-17T00:01:40.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222104. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x00222104
CVE ID: CVE-2018-10976 State: PUBLISHED Published: 2018-05-10T16:00:00Z Last Updated: 2024-09-17T02:01:29.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222050. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x00222050
CVE ID: CVE-2018-10977 State: PUBLISHED Published: 2018-05-10T16:00:00Z Last Updated: 2024-09-17T00:37:00.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x002220E4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x002220E4
CVE ID: CVE-2018-10981 State: PUBLISHED Published: 2018-05-10T22:00:00 Last Updated: 2024-08-05T07:54:35.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104149 - https://security.gentoo.org/glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html - http
rg/debian-lts-announce/2018/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html - http://openwall.com/lists/oss-security/2018/05/08/3 - https://www.debian.org/security/2018/dsa-4201 - https://xenbits.xen.org/xsa/advisory-262.html
CVE ID: CVE-2018-10982 State: PUBLISHED Published: 2018-05-10T23:00:00 Last Updated: 2024-08-05T07:54:36.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-APIC mode, aka vHPET interrupt injection. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html - https://www.debian.org/security/20
glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html - https://www.debian.org/security/2018/dsa-4201 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.securityfocus.com/bid/104150 - http://openwall.com/lists/oss-security/2018/05/08/2 - https://xenbits.xen.org/xsa/advisory-261.html
CVE ID: CVE-2018-10986 State: PUBLISHED Published: 2019-07-03T16:08:33 Last Updated: 2024-08-05T07:54:36.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX Guard 2.8.0 has CSRF. Additional Analyst Notes: - CVE Program Container: References: - http://software.open-xchange.com/products/guard/doc/OX_Guard_Release_Notes_for_Release_2.10.0_2018-07-04.pdf
CVE ID: CVE-2018-10987 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T07:54:36.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated remote code execution vulnerability. An authenticated attacker can send a specially crafted UDP packet, and execute commands on the vacuum cleaner as root. The bug is in the function REQUEST_SET_WIFIPASSWD (UDP command 153). A crafted UDP packet runs "/mnt/skyeye/mode_switch.sh %s" with an attacker controlling the %s variable. In some cases, authentication can be achieved with the default password of 888888 fo
tacker controlling the %s variable. In some cases, authentication can be achieved with the default password of 888888 for the admin account. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/neolead/10b27c5c04bca84a5515783ca6f2ecb4#file-cve-2018-10987-txt
CVE ID: CVE-2018-10988 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T07:54:36.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Diqee Diqee360 devices. A firmware update process, integrated into the firmware, starts at boot and tries to find the update folder on the microSD card. It executes code, without a digital signature, as root from the /mnt/sdcard/$PRO_NAME/upgrade.sh or /sdcard/upgrage_360/upgrade.sh pathname. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/neolead/a1fadac07373835507705a7d61e638ae#file-cve-2018-10988-txt
CVE ID: CVE-2018-10989 State: PUBLISHED Published: 2018-05-14T14:00:00 Last Updated: 2024-08-05T07:54:36.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a default password of "password" for the admin account that is used over an unencrypted http://192.168.0.1 connection, which might allow remote attackers to bypass intended access restrictions by leveraging access to the local network. NOTE: one or more user's guides distributed by ISPs state "At a minimum, you should set a login password." Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Akshay
uld set a login password." Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40AkshaySharmaUS/comcast-arris-touchstone-gateway-devices-are-vulnerable-heres-the-disclosure-7d603aa9342c
CVE ID: CVE-2018-10990 State: PUBLISHED Published: 2018-05-14T14:00:00 Last Updated: 2024-08-05T07:54:35.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity of the "credential" cookie, which might make it easier for attackers to obtain access at a later time (e.g., "at least for a few minutes"). NOTE: there is no documentation stating that the web UI's logout feature was supposed to do anything beyond removing the cookie from one instance of a web browser; a client-side logout action is often not intended to address cases wh
ing the cookie from one instance of a web browser; a client-side logout action is often not intended to address cases where a person has made a copy of a cookie outside of a browser. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40AkshaySharmaUS/comcast-arris-touchstone-gateway-devices-are-vulnerable-heres-the-disclosure-7d603aa9342c
CVE ID: CVE-2018-10991 State: REJECTED Published: 2018-05-14T14:00:00 Last Updated: 2018-05-14T13:57:01 Description: No description available.
CVE ID: CVE-2018-10992 State: PUBLISHED Published: 2018-05-11T22:00:00 Last Updated: 2024-08-05T07:54:36.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument, because the GNU Guile code uses the system Scheme procedure instead of the system* Scheme procedure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-17523. Additional Analyst Notes: - CVE Program Container: References: - http
s because of an incomplete fix for CVE-2017-17523. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/898373
CVE ID: CVE-2018-10994 State: PUBLISHED Published: 2018-05-14T23:00:00 Last Updated: 2024-08-05T07:54:36.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via a URL. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/ortegaalfredo/status/995940738839056384 - https://twitter.com/bcrypt/status/995057030304952320 - https://github.com/signalapp/Signal-Desktop/releases/tag/v1.10.1 - https://twitter.com/lorenzoFB/status/995048605399633926 - https://github.com/signalapp/Signal-Desktop/commit/bfbd84f5d1308cdfcb08a1727821f7103be151ea
CVE ID: CVE-2018-10995 State: PUBLISHED Published: 2018-05-30T20:00:00 Last Updated: 2024-08-05T07:54:36.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields). Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4254 - https://lists.debian.org/debian-lts-announce/2018/08/msg00008.html - https://lists.schedmd.com/pipermail/slurm-announce/2018/000008.html - https://www.schedmd.com/news.php?id=203 - https://lists.debian.org/debian-lts-announce/2018/07/msg00029.html
CVE ID: CVE-2018-10996 State: PUBLISHED Published: 2018-05-12T04:00:00 Last Updated: 2024-08-05T07:54:36.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The weblogin_log function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a session.cgi?ACTION=logout request involving a long REMOTE_ADDR environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104277 - https://github.com/kgsdy/D-Link-DIR-629/blob/master/D-Link-DIR-629-B1.md
CVE ID: CVE-2018-10997 State: PUBLISHED Published: 2018-06-17T17:00:00 Last Updated: 2024-08-05T07:54:36.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/dmblbc/14a77036a9562407194c3cf3ee3f265e
CVE ID: CVE-2018-10998 State: PUBLISHED Published: 2018-05-12T04:00:00 Last Updated: 2024-08-05T07:54:36.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3700-1/ - https://www.debian.org/security/2018/dsa-4238 - https://security.gentoo.org/glsa/201811-14 - https://lists.debian.org/debian-lts-announce/2018/06/msg00010.html - https://github.com/Exiv2/exiv2/issues/303 - https://access.redhat.com/errata/RHSA-2019:2101
CVE ID: CVE-2018-10999 State: PUBLISHED Published: 2018-05-12T04:00:00 Last Updated: 2024-08-05T07:54:36.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3700-1/ - https://www.debian.org/security/2018/dsa-4238 - https://lists.debian.org/debian-lts-announce/2018/10/msg00012.html - https://github.com/Exiv2/exiv2/issues/306 - https://security.gentoo.org/glsa/201811-14 - https://lists.debian.org/debian-lts-announce/2018/06/msg00010.html
CVE ID: CVE-2018-11002 State: PUBLISHED Published: 2018-11-29T16:00:00 Last Updated: 2024-08-05T07:54:36.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.themissinglink.com.au/security-advisories-cve-2017-16878-0 - http://www.securityfocus.com/bid/106054
CVE ID: CVE-2018-11003 State: PUBLISHED Published: 2018-05-12T04:00:00 Last Updated: 2024-08-05T07:54:36.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YXcms 1.4.7. Cross-site request forgery (CSRF) vulnerability in protected/apps/admin/controller/adminController.php allows remote attackers to delete administrator accounts via index.php?r=admin/admin/admindel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TekerFue/YXcms-Code-Audit/blob/master/1.4.7%20csrf
CVE ID: CVE-2018-11004 State: PUBLISHED Published: 2018-05-12T04:00:00 Last Updated: 2024-08-05T07:54:36.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SDcms v1.5. Cross-site request forgery (CSRF) vulnerability in /WWW//app/admin/controller/admincontroller.php allows remote attackers to add administrator accounts via m=admin&c=admin&a=add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TekerFue/SDcms-Code-Audit/blob/master/1.5%20csrf
CVE ID: CVE-2018-11005 State: PUBLISHED Published: 2021-01-11T15:41:32 Last Updated: 2024-08-05T07:54:36.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. Additional Analyst Notes: - CVE Program Container: References: - https://www.k7computing.com - https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
CVE ID: CVE-2018-11006 State: PUBLISHED Published: 2021-01-11T15:38:25 Last Updated: 2024-08-05T07:54:36.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. Additional Analyst Notes: - CVE Program Container: References: - https://www.k7computing.com - https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
CVE ID: CVE-2018-11007 State: PUBLISHED Published: 2021-01-11T15:41:06 Last Updated: 2024-08-05T07:54:36.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. Additional Analyst Notes: - CVE Program Container: References: - https://www.k7computing.com - https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
CVE ID: CVE-2018-11008 State: PUBLISHED Published: 2021-01-11T15:39:26 Last Updated: 2024-08-05T07:54:36.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. Additional Analyst Notes: - CVE Program Container: References: - https://www.k7computing.com - https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021