Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9154 State: PUBLISHED Published: 2018-05-04T21:00:00 Last Updated: 2024-08-05T07:17:51.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/u/2/folders/1YuxdfbZrw79kfzoQz0PpxIutZ7pkf_kW - https://security.gentoo.org/glsa/201908-03 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-9155 State: PUBLISHED Published: 2018-04-12T15:00:00 Last Updated: 2024-08-05T07:17:51.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin->Logs section (with a logs?logs.type= URI) and the Manage->Attributes section (via the "Name (display)" field to the attributes/create URI). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44612/ - https://docs.google.com/document/d/1ZG1qiwpECbVnv92yNckDn7yyuluKoC2_ON-eLhAY97Q/
://www.exploit-db.com/exploits/44612/ - https://docs.google.com/document/d/1ZG1qiwpECbVnv92yNckDn7yyuluKoC2_ON-eLhAY97Q/edit?usp=sharing
CVE ID: CVE-2018-9156 State: PUBLISHED Published: 2018-04-01T18:00:00 Last Updated: 2024-08-05T07:17:51.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "<!--#exec cmd=" support. The file needs to include a specific string to meet the internal system architecture. After the webshell upload, an attacker can use the webshell to perform remote code execution such as running a sy
cture. After the webshell upload, an attacker can use the webshell to perform remote code execution such as running a system command (ls, ping, cat /etc/passwd, etc.). NOTE: the vendor reportedly indicates that this is an intended feature or functionality Additional Analyst Notes: - CVE Program Container: References: - https://www.slideshare.net/secret/aewA1dZwZ9FQ8g
CVE ID: CVE-2018-9157 State: PUBLISHED Published: 2018-04-01T18:00:00 Last Updated: 2024-08-05T07:17:51.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include module with "<!--#exec cmd=" support. The file needs to include a specific string to meet the internal system architecture. After the webshell upload, an attacker can use the webshell to perform remote code execution such as running a
tecture. After the webshell upload, an attacker can use the webshell to perform remote code execution such as running a system command (ls, ping, cat /etc/passwd, etc.). NOTE: the vendor reportedly indicates that this is an intended feature or functionality Additional Analyst Notes: - CVE Program Container: References: - https://www.slideshare.net/secret/pRWQOOe6rN8Iyb
CVE ID: CVE-2018-9158 State: PUBLISHED Published: 2018-04-01T18:00:00 Last Updated: 2024-08-05T07:17:51.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from attack start to end. Additional Analyst Notes: - CVE Program Container: References: - https://www.slideshare.net/secret/HpAEwK5qo5U4b1
CVE ID: CVE-2018-9159 State: PUBLISHED Published: 2018-03-31T21:00:00 Last Updated: 2024-08-05T07:17:51.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/perwendel/spark/issues/981 - https://github.com/perwendel/spark/commit/a221a864db28eb736d36041df2fa6eb8839fc5cd - https://access.redhat.com/errata/RHSA-2018:2020 - https://access.redhat.co
it/a221a864db28eb736d36041df2fa6eb8839fc5cd - https://access.redhat.com/errata/RHSA-2018:2020 - https://access.redhat.com/errata/RHSA-2018:2405 - https://github.com/perwendel/spark/commit/ce9e11517eca69e58ed4378d1e47a02bd06863cc - http://sparkjava.com/news#spark-272-released - https://github.com/perwendel/spark/commit/030e9d00125cbd1ad759668f85488aba1019c668
CVE ID: CVE-2018-9160 State: PUBLISHED Published: 2018-03-31T21:00:00 Last Updated: 2024-08-05T07:17:51.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SickRage/SickRage/commit/8156a74a68aea930d1e1047baba8b115c3abfc44 - https://www.exploit-db.com/exploits/44545/ - https://github.com/SickRage/sickrage.github.io/blob/master/sickrage-news/CHANGES.md
CVE ID: CVE-2018-9161 State: PUBLISHED Published: 2018-03-31T22:00:00Z Last Updated: 2024-09-16T23:05:22.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44276/ - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5453.php
CVE ID: CVE-2018-9162 State: PUBLISHED Published: 2018-03-31T22:00:00Z Last Updated: 2024-09-17T02:57:05.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contec Smart Home 4.15 devices do not require authentication for new_user.php, edit_user.php, delete_user.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44295/
CVE ID: CVE-2018-9163 State: PUBLISHED Published: 2018-04-02T12:00:00 Last Updated: 2024-08-05T07:17:51.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authenticated users (with Add New Technician permissions) to inject arbitrary web script or HTML via the loginName field to technicianAction.do. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/ad-recovery-manager/release-notes.html#5350 - https://gurelahmet.com/cve-2018-9163-zoho-manageengine-recovery-manager-plus-5-3-build-5330-stored-cross-site-script
0 - https://gurelahmet.com/cve-2018-9163-zoho-manageengine-recovery-manager-plus-5-3-build-5330-stored-cross-site-scripting-xss-vulnerability/ - http://www.securityfocus.com/bid/103773 - https://www.exploit-db.com/exploits/44666/
CVE ID: CVE-2018-9165 State: PUBLISHED Published: 2018-04-01T18:00:00 Last Updated: 2024-08-05T07:17:51.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html - https://github.com/libming/libming/issues/121
CVE ID: CVE-2018-9169 State: PUBLISHED Published: 2018-04-15T14:00:00 Last Updated: 2024-08-05T07:17:51.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter. The component must be accessed directly by an administrator, or through CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://xz.aliyun.com/t/2277
CVE ID: CVE-2018-9172 State: PUBLISHED Published: 2018-04-01T23:00:00 Last Updated: 2024-08-05T07:17:51.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes. Additional Analyst Notes: - CVE Program Container: References: - https://www.iptanus.com/new-version-4-3-3-of-wordpress-file-upload-plugin/ - https://wordpress.org/plugins/wp-file-upload/#developers - https://www.exploit-db.com/exploits/44443/
CVE ID: CVE-2018-9173 State: PUBLISHED Published: 2018-04-02T03:00:00 Last Updated: 2024-08-05T07:17:51.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1266 - https://www.exploit-db.com/exploits/44408/
CVE ID: CVE-2018-9174 State: PUBLISHED Published: 2018-04-02T03:00:00 Last Updated: 2024-08-05T07:17:51.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an attacker's control. Additional Analyst Notes: - CVE Program Container: References: - https://xz.aliyun.com/t/2237
CVE ID: CVE-2018-9175 State: PUBLISHED Published: 2018-04-02T03:00:00 Last Updated: 2024-08-05T07:17:51.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselect_main.php because code within the database is accessible to uploads/dede/sys_cache_up.php. Additional Analyst Notes: - CVE Program Container: References: - https://xz.aliyun.com/t/2237
CVE ID: CVE-2018-9177 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T07:17:51.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/prafagr/bd641fcfe71661065e659672c737173b
CVE ID: CVE-2018-9182 State: PUBLISHED Published: 2018-06-08T01:00:00 Last Updated: 2024-08-05T07:17:51.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/priyanksethi/08fb93341cf7e61344aad5c4fee3aa9b
CVE ID: CVE-2018-9183 State: PUBLISHED Published: 2018-04-02T15:00:00 Last Updated: 2024-08-05T07:17:51.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44401/ - https://www.joomsky.com/products/js-jobs.html - https://vel.joomla.org/resolved/2146-js-jobs-1-2-0-xss-cross-site-scripting
CVE ID: CVE-2018-9185 State: PUBLISHED Published: 2018-07-05T13:00:00 Last Updated: 2024-10-25T14:31:34.138Z Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Information disclosure Description: An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javascript file sent to client-side when pages bookmarked in web portal use the Single Sign-On feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/104535 - http://www.securitytracker.com/id/1041186 - https://fortiguard.com/advisory/FG-IR-18-027
CVE ID: CVE-2018-9186 State: PUBLISHED Published: 2018-05-31T22:00:00Z Last Updated: 2024-10-25T14:09:37.923Z Vendors: Fortinet, Inc. Products: FortiAuthenticator Problem Types: Execute unauthorized code or commands Description: A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-059 - http://www.securityfocus.com/bid/104371
CVE ID: CVE-2018-9190 State: PUBLISHED Published: 2019-02-08T19:00:00Z Last Updated: 2024-10-25T14:07:48.416Z Vendors: Fortinet, Inc. Products: Fortinet FortiClientWindows Problem Types: Denial of service Description: A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-092
CVE ID: CVE-2018-9191 State: PUBLISHED Published: 2019-05-30T16:27:18 Last Updated: 2024-10-25T14:29:42.499Z Vendors: Fortinet Products: Fortinet FortiClient for Windows Problem Types: Execute unauthorized code or commands Description: A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-108
CVE ID: CVE-2018-9192 State: PUBLISHED Published: 2018-09-05T13:00:00Z Last Updated: 2024-10-25T14:08:14.725Z Vendors: Fortinet, Inc. Products: FortiOS Problem Types: Information disclosure Description: A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under SSL Deep Inspection feature when CPx being used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://robotattack.org/ - https://fortiguard.com/advisory/FG-IR-17-302 - https://www.kb.cert.org/v
hment: References: - https://robotattack.org/ - https://fortiguard.com/advisory/FG-IR-17-302 - https://www.kb.cert.org/vuls/id/144389
CVE ID: CVE-2018-9193 State: PUBLISHED Published: 2019-05-30T16:27:54 Last Updated: 2025-03-24T15:43:31.634Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:X/RC:X) Vendors: Fortinet Products: FortiClientWindows Description: A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, which allows a user to gain system privileges on Microsoft Windows. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-108
CVE ID: CVE-2018-9194 State: PUBLISHED Published: 2018-09-05T13:00:00Z Last Updated: 2024-10-25T14:08:00.472Z Vendors: Fortinet, Inc. Products: FortiOS Problem Types: Information disclosure Description: A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under VIP SSL feature when CPx being used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://robotattack.org/ - https://fortiguard.com/advisory/FG-IR-17-302 - https://www.kb.cert.org/vuls/id/14438
ences: - https://robotattack.org/ - https://fortiguard.com/advisory/FG-IR-17-302 - https://www.kb.cert.org/vuls/id/144389
CVE ID: CVE-2018-9195 State: PUBLISHED Published: 2019-11-21T14:59:52 Last Updated: 2024-10-25T14:05:09.966Z Vendors: Fortinet Products: FortiClient for Windows, FortiOS, FortiClient for Mac OS Problem Types: Information disclosure Description: Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle with knowledge of the key to eavesdrop on and modify information (URL/SPAM services in FortiOS 5.6, and URL/SPAM/AV services in FortiOS 6.0.; URL rating in FortiClient) sent and received from Fortiguard severs by decrypting these messages. Affected products include FortiClient for Windows 6.0.6 and below, FortiOS 6.0.7 and below, FortiC
pting these messages. Affected products include FortiClient for Windows 6.0.6 and below, FortiOS 6.0.7 and below, FortiClient for Mac OS 6.2.1 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-100
CVE ID: CVE-2018-9196 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:23.361Z Description: No description available.
CVE ID: CVE-2018-9197 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:22.909Z Description: No description available.
CVE ID: CVE-2018-9198 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:22.468Z Description: No description available.
CVE ID: CVE-2018-9199 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:22.025Z Description: No description available.
CVE ID: CVE-2018-9200 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:21.580Z Description: No description available.
CVE ID: CVE-2018-9201 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:21.120Z Description: No description available.
CVE ID: CVE-2018-9202 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:20.671Z Description: No description available.
CVE ID: CVE-2018-9203 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:20.226Z Description: No description available.
CVE ID: CVE-2018-9204 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:19.788Z Description: No description available.
CVE ID: CVE-2018-9205 State: PUBLISHED Published: 2018-04-04T15:00:00 Last Updated: 2024-08-05T07:17:51.549Z Vendors: Robbin Zhao Products: avatar_uploader Problem Types: Arbitrary file download vulnerability in Drupal module avatar_uploader v7.x-1.0-beta8 Description: Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=202 - https://www.exploit-db.com/exploits/44501/ - https://www.drupal.org/project/avatar_uploader - https://www.drupal.org/project/avatar_uploader/issues/2957966
CVE ID: CVE-2018-9206 State: PUBLISHED Published: 2018-10-11T15:00:00 Last Updated: 2025-11-04T14:26:56.318Z Vendors: Blueimp Products: Blueimp jQuery-File-Upload Problem Types: jQuery-File-Upload <= v9.22.0 unauthenticated arbitrary file upload vulnerability Description: Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106629 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.exploit-db.com/exploits/46182/ - https://wpvulndb.com/vulnerabilities/9136 - https://www.exploit-db.com/exploits/45790/ - http://www.vap
xploits/46182/ - https://wpvulndb.com/vulnerabilities/9136 - https://www.exploit-db.com/exploits/45790/ - http://www.vapidlabs.com/advisory.php?v=204 - http://www.securityfocus.com/bid/105679
CVE ID: CVE-2018-9207 State: PUBLISHED Published: 2018-11-19T17:00:00 Last Updated: 2024-08-05T07:17:52.096Z Vendors: hayageek Products: jQuery Upload File Problem Types: Arbitrary file upload vulnerability in jQuery Upload File v4.0.2 Description: Arbitrary file upload in jQuery Upload File <= 4.0.2 Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=206
CVE ID: CVE-2018-9208 State: PUBLISHED Published: 2018-11-05T14:00:00 Last Updated: 2024-08-05T07:17:52.013Z Vendors: Tuyoshi Vinicius Products: jQuery Picture Cut Problem Types: jQuery Picture Cut <= v1.1Beta unauthenticated arbitrary file upload vulnerability Description: Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=207
CVE ID: CVE-2018-9209 State: PUBLISHED Published: 2018-11-19T18:00:00 Last Updated: 2024-08-05T07:17:51.791Z Vendors: FineUploader Products: FineUploader php-traditional-server Problem Types: FineUploader php-traditional-server <= v1.2.2 unauthenticated arbitrary file upload vulnerability Description: Unauthenticated arbitrary file upload vulnerability in FineUploader php-traditional-server <= v1.2.2 Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=208
CVE ID: CVE-2018-9230 State: PUBLISHED Published: 2018-04-02T18:00:00 Last Updated: 2024-08-05T07:17:51.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore parameters beyond the hundredth one, which might allow remote attackers to bypass intended access restrictions or interfere with certain Web Application Firewall (ngx_lua_waf or X-WAF) products. NOTE: the vendor has reported that 100 parameters is an intentional default setting, but is adjustable within the API. The vendor's position is that a security-relevant misuse of the API by a WAF pro
ting, but is adjustable within the API. The vendor's position is that a security-relevant misuse of the API by a WAF product is a vulnerability in the WAF product, not a vulnerability in OpenResty Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Bypass007/vuln/blob/master/OpenResty/Uri%20parameter%20overflow%20in%20Openresty.md - https://openresty.org/en/changelog-1013006.html
CVE ID: CVE-2018-9232 State: PUBLISHED Published: 2018-05-01T18:00:00 Last Updated: 2024-08-05T07:17:51.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update. Additional Analyst Notes: - CVE Program Container: References: - https://www.digitalwhisper.co.il/files/Zines/0x5E/DW94-3-Repeater2.pdf
CVE ID: CVE-2018-9233 State: PUBLISHED Published: 2018-04-05T17:00:00 Last Updated: 2024-08-05T07:17:51.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers to determine a cleartext password, and subsequently choose unsafe malware settings, via rainbow tables or other approaches. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44411/ - http://seclists.org/fulldisclosure/2018/Apr/7 - http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-C
http://seclists.org/fulldisclosure/2018/Apr/7 - http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-CONTROL-PANEL-v10.7-INSECURE-CRYPTO-CVE-2018-9233.txt