Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20800 State: PUBLISHED Published: 2019-03-13T22:00:00Z Last Updated: 2024-09-17T00:42:05.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major updates) will experience data loss in their agent preferences table. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2018-10-security-update-for-otrs-framework
CVE ID: CVE-2018-20801 State: PUBLISHED Published: 2019-03-14T16:00:00 Last Updated: 2024-08-05T12:12:28.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/npm:highcharts:20180225 - https://github.com/highcharts/highcharts/commit/7c547e1e0f5e4379f94396efd559a566668c0dfa - https://security.netapp.com/advisory/ntap-20190715-0001/
CVE ID: CVE-2018-20802 State: PUBLISHED Published: 2020-11-23T15:15:18.509747Z Last Updated: 2024-09-17T02:26:45.416Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-394 Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-36993
CVE ID: CVE-2018-20803 State: PUBLISHED Published: 2020-11-23T17:30:14.042305Z Last Updated: 2024-09-16T21:02:58.886Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-835 Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mo
B Server v3.4 versions prior to 3.4.19. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-38070
CVE ID: CVE-2018-20804 State: PUBLISHED Published: 2020-11-23T15:15:14.421540Z Last Updated: 2024-09-17T02:10:48.220Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-20 Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-35636
CVE ID: CVE-2018-20805 State: PUBLISHED Published: 2020-11-23T15:20:13.690425Z Last Updated: 2024-09-17T03:08:29.011Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-834 Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-38164
CVE ID: CVE-2018-20806 State: PUBLISHED Published: 2019-03-15T23:00:00 Last Updated: 2024-08-05T12:12:27.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lota/phamm/issues/24
CVE ID: CVE-2018-20807 State: PUBLISHED Published: 2019-03-16T03:00:00 Last Updated: 2024-08-05T12:12:27.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730/
CVE ID: CVE-2018-20808 State: PUBLISHED Published: 2019-03-16T03:00:00Z Last Updated: 2024-09-17T00:57:00.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
CVE ID: CVE-2018-20809 State: PUBLISHED Published: 2019-03-16T03:00:00Z Last Updated: 2024-09-16T20:16:14.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
CVE ID: CVE-2018-20810 State: PUBLISHED Published: 2019-03-16T03:00:00Z Last Updated: 2024-09-16T17:07:45.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
CVE ID: CVE-2018-20811 State: PUBLISHED Published: 2019-03-16T03:00:00Z Last Updated: 2024-09-16T23:56:27.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
CVE ID: CVE-2018-20812 State: PUBLISHED Published: 2019-03-16T03:00:00Z Last Updated: 2024-09-16T20:03:39.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack (IPv4/IPv6) endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
CVE ID: CVE-2018-20813 State: PUBLISHED Published: 2019-03-16T03:00:00Z Last Updated: 2024-09-16T22:25:36.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
CVE ID: CVE-2018-20814 State: PUBLISHED Published: 2019-03-16T03:00:00 Last Updated: 2024-08-05T12:12:27.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX or PPS 5.2RX. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/ - http://www.securityfocus.com/bid/109033
CVE ID: CVE-2018-20815 State: PUBLISHED Published: 2019-05-31T21:40:01 Last Updated: 2024-08-05T12:12:27.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk. Additional Analyst Notes: - CVE Program Container: References: - https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17 - https://access.redhat.com/errata/RHSA-2019:1667 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/ - https://lists.fedoraproject.org/archives/list/package-announce%
aproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/ - https://access.redhat.com/errata/RHSA-2019:1723 - https://access.redhat.com/errata/RHSA-2019:1743 - https://access.redhat.com/errata/RHSA-2019:1881 - https://access.redhat.com/errata/RHSA-2019:1968 - https://access.redhat.com/errata/RHSA-2019:2507 - https://access.redhat.com/errata/RHSA-2019:2553 - https://seclists.org/bugtraq/2019/Aug/41 - https://www.debian.org/security/2019/dsa-4506
CVE ID: CVE-2018-20816 State: PUBLISHED Published: 2019-04-05T13:05:07 Last Updated: 2024-08-05T12:12:27.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with script executed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/salesagility/SuiteDocs/pull/198/files - https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_11 - https://docs.suitecrm.com/admin/relea
eDocs/pull/198/files - https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_11 - https://docs.suitecrm.com/admin/releases/7.8.x/#_7_8_24
CVE ID: CVE-2018-20817 State: PUBLISHED Published: 2019-04-19T22:08:01 Last Updated: 2024-08-05T12:12:27.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a buffer, which allows one to execute code on the remote target machine when sending a steam authentication request. This affects Call of Duty: Modern Warfare 2, Call of Duty: Modern Warfare 3, Call of Duty: Ghosts, Call of Duty: Advanced Warfare, Call of Duty: Black Ops 1, and Call of Duty: Black Ops 2. Additional Analyst Notes: - CVE Program Container: References: - https://gith
lack Ops 1, and Call of Duty: Black Ops 2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RektInator/cod-steamauth-rce - https://github.com/momo5502/cod-exploits/tree/master/steam-auth
CVE ID: CVE-2018-20818 State: PUBLISHED Published: 2019-04-21T19:50:39 Last Updated: 2024-08-05T12:12:27.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO() function, which can cause a runtime crash of the PLC or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://arxiv.org/pdf/1809.07477
CVE ID: CVE-2018-20819 State: PUBLISHED Published: 2019-04-23T13:53:36 Last Updated: 2024-08-05T12:12:27.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact by crafting a jpg image file. The root cause is a missing check of header payloads that may be (incorrectly) larger than the maximum file size. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/112
CVE ID: CVE-2018-20820 State: PUBLISHED Published: 2019-04-23T13:53:49 Last Updated: 2024-08-05T12:12:27.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/111 - https://github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761
CVE ID: CVE-2018-20821 State: PUBLISHED Published: 2019-04-23T13:54:07 Last Updated: 2024-08-05T12:12:27.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse_css_variable_value in parser.cpp). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2658 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE ID: CVE-2018-20822 State: PUBLISHED Published: 2019-04-23T13:54:19 Last Updated: 2024-08-05T12:12:27.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2671 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE ID: CVE-2018-20823 State: PUBLISHED Published: 2019-04-25T13:47:55 Last Updated: 2024-08-05T12:12:27.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEMS ultrasound attack. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40juliodellaflora/ultrassom-pode-causar-anomalias-no-girosc%C3%B3pio-do-xiaomi-mi5s-plus-4050d718bc7f - https://hackaday.com/2018/07/17/freak-out-your-smartphone-with-ultrasound/
CVE ID: CVE-2018-20824 State: PUBLISHED Published: 2019-05-03T19:26:27.846676Z Last Updated: 2024-09-17T02:37:01.068Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69238
CVE ID: CVE-2018-20826 State: PUBLISHED Published: 2019-08-09T19:31:09.865647Z Last Updated: 2024-09-17T00:01:48.975Z Vendors: Atlassian Products: Jira Problem Types: CWE-863 Description: The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69239
CVE ID: CVE-2018-20827 State: PUBLISHED Published: 2019-08-09T19:31:05.597557Z Last Updated: 2024-09-16T22:30:50.061Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the country parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69237
CVE ID: CVE-2018-20834 State: PUBLISHED Published: 2019-04-30T18:01:58 Last Updated: 2024-08-05T12:12:27.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content. A patch has been applied to node-tar v2.2.2). Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/344595 - https://github.com/npm/nod
Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/344595 - https://github.com/npm/node-tar/commit/b0c58433c22f5e7fe8b1c76373f27e3f81dcd4c8 - https://github.com/npm/node-tar/compare/58a8d43...a5f7779 - https://access.redhat.com/errata/RHSA-2019:1821 - https://nvd.nist.gov/vuln/detail/CVE-2018-20834 - https://github.com/npm/node-tar/commit/7ecef07da6a9e72cc0c4d0c9c6a8e85b6b52395d - https://github.com/npm/node-tar/commits/v2.2.2
CVE ID: CVE-2018-20835 State: PUBLISHED Published: 2019-04-30T18:02:13 Last Updated: 2024-08-05T12:12:26.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in tar-fs before 1.16.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/344595 - https://github.com/mafintosh/tar-fs/commit/06672828e6fa29ac8551b1b6f36c852a9a3c58a2 - https://github.com/ma
rts/344595 - https://github.com/mafintosh/tar-fs/commit/06672828e6fa29ac8551b1b6f36c852a9a3c58a2 - https://github.com/mafintosh/tar-fs/compare/d590fc7...a35ce2f
CVE ID: CVE-2018-20836 State: PUBLISHED Published: 2019-05-07T13:04:44 Last Updated: 2024-08-05T12:12:27.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/b90cd6f2b905905fb42671009dc0e27c310a16ae - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b90cd6f2b905905fb42671009dc0e27c310a16ae - http://www.securityfocus.com/bid/108196 - https://support.f5.com/csp/a
it/?id=b90cd6f2b905905fb42671009dc0e27c310a16ae - http://www.securityfocus.com/bid/108196 - https://support.f5.com/csp/article/K11225249 - https://security.netapp.com/advisory/ntap-20190719-0003/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html - https://usn.ubuntu.com/4076-1/ - https://www.debian.org/security/2019/dsa-4495 - https://seclists.org/bugtraq/2019/Aug/13 - https://seclists.org/bugtraq/2019/Aug/18 - https://www.debian.org/security/2019/dsa-4497 - https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00017.ht
.debian.org/debian-lts-announce/2019/08/msg00016.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html
CVE ID: CVE-2018-20837 State: PUBLISHED Published: 2019-05-09T21:25:23 Last Updated: 2024-08-05T12:12:27.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/web-applications-advisories/ns-18-026-reflected-cross-site-scripting-in-typesetter/ - https://github.com/Typesetter/Typesetter/commit/fd637e2919e7f77c498a91a8e9d353f8e12afc9a
CVE ID: CVE-2018-20838 State: PUBLISHED Published: 2019-05-13T04:04:18 Last Updated: 2024-08-05T12:12:28.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: ampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2018/11/xss-injection-campaign-exploits-wordpress-amp-plugin/ - https://plugins.trac.wordpress.org/browser/accelerated-mobile-pages/trunk/changelog.txt - https://wordpress.org/plugins/accelerated-mobile-pages/#developers - https://ampforwp.com/critical-security-issues-has-been-fixed-in-0-9-97-20-version/
CVE ID: CVE-2018-20839 State: PUBLISHED Published: 2019-05-17T03:39:01 Last Updated: 2024-08-05T12:12:29.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993 - https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f - https://github.com/systemd/systemd/pull/1
//github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f - https://github.com/systemd/systemd/pull/12378 - http://www.securityfocus.com/bid/108389 - https://security.netapp.com/advisory/ntap-20190530-0002/ - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2018-20840 State: PUBLISHED Published: 2019-05-30T15:58:10 Last Updated: 2024-08-05T12:12:28.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of misinterpretation of an integer as a string, resulting in denial-of-service and then other users can no longer login/sign-in to the affected third-party service. Once this third-party service uses Google Sign-In with google-api-cpp-cli
n/sign-in to the affected third-party service. Once this third-party service uses Google Sign-In with google-api-cpp-client, a malicious user can trigger this client/auth/oauth2_authorization.cc vulnerability by requesting the client to receive the ID token from a Google authentication server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/google-api-cpp-client/pull/58 - https://github.com/google/google-api-cpp-client/issues/57
CVE ID: CVE-2018-20841 State: PUBLISHED Published: 2019-06-11T20:45:17 Last Updated: 2024-08-05T12:12:28.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mac_table request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46143 - https://ioactive.com/hootoo-tripmate-routers-are-cute-but/