Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6218 State: PUBLISHED Published: 2018-02-16T22:00:00 Last Updated: 2024-08-05T05:54:53.355Z Vendors: Trend Micro Products: Trend Micro User-Mode Hooking (UMH) Module Problem Types: DLL Hijacking Description: A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103096 - https://jvn.jp/jp/JVN28865183/ - https://success.trendmicro.com/solution/1119326 - https://success.trendmicro.com/jp/solution/1119348
CVE ID: CVE-2018-6219 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.153Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: Insecure Permissions Description: An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with certain types of update data. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6220 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.206Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: OTHER - Arbitrary File Write Description: An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining code execution on vulnerable systems. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6221 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.169Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: OTHER - Unvalidated Update Description: An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle attacker to tamper with an update file and inject their own. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6222 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.396Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: OTHER - Arbitrary Logs Location Description: Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulated to execute arbitrary commands and attain command execution on a vulnerable system. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-
/success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6223 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.273Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: INCORRECT ACCESS CONTROL Description: A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate the registration process of the product to reset configuration parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-v
rendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6224 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.147Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: CSRF Description: A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit authenticated requests to a user browsing an attacker-controlled domain. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6225 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.392Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: XXE Description: An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6226 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.175Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: XSS Description: Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject client-side scripts into vulnerable systems. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6227 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.174Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: XSS Description: A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulnerable systems. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6228 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T05:54:53.353Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: SQL Injection Description: A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6229 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T06:01:47.997Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: SQL Injection Description: A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6230 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T06:01:47.658Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: SQL Injection Description: A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44166/ - https://success.trendmicro.com/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilit
om/solution/1119349 - https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6231 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T06:01:47.743Z Vendors: Trend Micro Products: Trend Micro Smart Protection Server (Standalone) Problem Types: OTHER - Authentication Bypass Description: A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and below could allow remote attackers to escalate privileges on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-218/ - https://success.trendmicro.com/solution/1119385
CVE ID: CVE-2018-6232 State: PUBLISHED Published: 2018-05-25T15:00:00 Last Updated: 2024-08-05T06:01:47.663Z Vendors: Trend Micro Products: Trend Micro Maximum Security Problem Types: Buffer Overflow Privilege Escalation Description: A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://
system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-266/ - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE ID: CVE-2018-6233 State: PUBLISHED Published: 2018-05-25T15:00:00 Last Updated: 2024-08-05T06:01:47.677Z Vendors: Trend Micro Products: Trend Micro Maximum Security Problem Types: Buffer Overflow Privilege Escalation Description: A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222060 by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://
system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-267/ - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE ID: CVE-2018-6234 State: PUBLISHED Published: 2018-05-25T15:00:00 Last Updated: 2024-08-05T06:01:47.979Z Vendors: Trend Micro Products: Trend Micro Maximum Security Problem Types: Out-of-Bounds Read Information Disclosure Description: An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container:
ed code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-268/ - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE ID: CVE-2018-6235 State: PUBLISHED Published: 2018-05-25T15:00:00 Last Updated: 2024-08-05T06:01:47.663Z Vendors: Trend Micro Products: Trend Micro Maximum Security Problem Types: Out-of-Bounds Write Privilege Escalation Description: An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
e target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-269/ - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE ID: CVE-2018-6236 State: PUBLISHED Published: 2018-05-25T15:00:00 Last Updated: 2024-08-05T06:01:47.981Z Vendors: Trend Micro Products: Trend Micro Maximum Security Problem Types: Time-of-Check Time-of-Use Privilege Escalation Description: A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: Reference
n the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx - https://www.zerodayinitiative.com/advisories/ZDI-18-410/
CVE ID: CVE-2018-6237 State: PUBLISHED Published: 2018-05-25T15:00:00 Last Updated: 2024-08-05T06:01:47.700Z Vendors: Trend Micro Products: Trend Micro Smart Protection Server (Standalone) Problem Types: OTHER - DOS Description: A vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service (DoS) situation. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-10 - https://success.trendmicro.com/solution/11
tainer: References: - https://www.tenable.com/security/research/tra-2018-10 - https://success.trendmicro.com/solution/1119715
CVE ID: CVE-2018-6239 State: PUBLISHED Published: 2019-04-12T16:24:59 Last Updated: 2024-08-05T06:01:48.089Z Vendors: NVIDIA Products: Jetson TX2 Problem Types: Information disclosure Description: NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may access the contents of cached information in an unauthorized manner, which may lead to information disclosure. The updates apply to all versions prior to R28.3. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE ID: CVE-2018-6240 State: PUBLISHED Published: 2019-09-06T14:18:36 Last Updated: 2024-08-05T06:01:47.982Z Vendors: n/a Products: Android Problem Types: Escalation of privileges Description: NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4804 - https://source.android.com/security/bulletin/2019-09-01 - https://nvidia.custhelp.com/app/answers/detail/a_id/4910
CVE ID: CVE-2018-6241 State: PUBLISHED Published: 2019-01-31T20:00:00Z Last Updated: 2024-09-16T19:00:28.565Z Vendors: Nvidia Corporation Products: Android Problem Types: Escalation of privileges Description: NVIDIA Tegra Gralloc module contains a vulnerability in driver in which it does not validate input parameter of the registerbuffer API, which may lead to arbitrary code execution, denial of service, or escalation of privileges. Android ID: A-62540032 Severity Rating: High Version: N/A. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106476 - https://source.android.com/security/bulletin/2019-01-01 - https://nvidia.custhelp.com/app/answers
focus.com/bid/106476 - https://source.android.com/security/bulletin/2019-01-01 - https://nvidia.custhelp.com/app/answers/detail/a_id/4804
CVE ID: CVE-2018-6242 State: PUBLISHED Published: 2018-05-01T20:00:00Z Last Updated: 2024-09-16T16:53:48.144Z Vendors: Nvidia Corporation Products: Some NVIDIA Tegra Mobile Processors Problem Types: Code execution, escalation of privileges, and information disclosure Description: Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4660
CVE ID: CVE-2018-6243 State: PUBLISHED Published: 2019-05-07T19:36:19 Last Updated: 2024-08-05T06:01:47.692Z Vendors: NVIDIA Products: Tegra TLK Widevine Trust Application Problem Types: Escalation of privileges, Code Execution, Information Disclosure Description: NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of video metadata count may lead to Arbitrary Code Execution, Denial of Service or Escalation of Privileges. Android ID: A-72315075. Severity Rating: High. Version: N/A. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-05-01 - http://www.securityfocus.co
E Program Container: References: - https://source.android.com/security/bulletin/2019-05-01 - http://www.securityfocus.com/bid/108287
CVE ID: CVE-2018-6246 State: PUBLISHED Published: 2018-05-10T14:00:00Z Last Updated: 2024-09-17T02:42:46.227Z Vendors: Nvidia Corporation Products: Android Problem Types: Information Disclosure Description: In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data past the end, or before the beginning, of the intended buffer, which may lead to Information Disclosure. This issue is rated as moderate. Android: A-69383916. Reference: N-CVE-2018-6246. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2018-6247 State: PUBLISHED Published: 2018-04-02T16:00:00Z Last Updated: 2024-09-17T02:10:55.205Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference may lead to denial of service or possible escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4649
CVE ID: CVE-2018-6248 State: PUBLISHED Published: 2018-04-02T16:00:00Z Last Updated: 2024-09-16T22:10:32.779Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer which may lead to denial of service or possible escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.c
ible escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4649
CVE ID: CVE-2018-6249 State: PUBLISHED Published: 2018-04-02T16:00:00Z Last Updated: 2024-09-17T01:17:00.656Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4649 - https://usn.ubuntu.com/3662-1/
CVE ID: CVE-2018-6250 State: PUBLISHED Published: 2018-04-02T16:00:00Z Last Updated: 2024-09-16T23:31:00.264Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference occurs which may lead to denial of service or possible escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4649
CVE ID: CVE-2018-6251 State: PUBLISHED Published: 2018-04-02T16:00:00Z Last Updated: 2024-09-16T23:01:50.192Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Code Execution Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the DirectX 10 Usermode driver, where a specially crafted pixel shader can cause writing to unallocated memory, leading to denial of service or potential code execution. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4649 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0514
CVE ID: CVE-2018-6252 State: PUBLISHED Published: 2018-04-02T16:00:00Z Last Updated: 2024-09-16T17:24:03.220Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software allows an actor access to restricted functionality that is unnecessary to production usage, and which may result in denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4649
CVE ID: CVE-2018-6253 State: PUBLISHED Published: 2018-04-02T16:00:00Z Last Updated: 2024-09-17T03:34:07.076Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service Description: NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursion leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4649 - https://usn.ubuntu.com/3662-1/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0522