Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-8784 State: PUBLISHED Published: 2018-11-29T17:00:00Z Last Updated: 2024-09-17T01:55:43.145Z Vendors: Check Point Software Technologies Ltd. Products: FreeRDP Problem Types: CWE-120 Description: FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://github.com/FreeRDP/FreeRDP/commit/17c363a5162fd4dc77b1df54e48d7bd9
e-rdp-attack-code-execution-on-rdp-clients/ - https://github.com/FreeRDP/FreeRDP/commit/17c363a5162fd4dc77b1df54e48d7bd9bf6b3be7
CVE ID: CVE-2018-8785 State: PUBLISHED Published: 2018-11-29T17:00:00Z Last Updated: 2024-09-16T20:22:24.986Z Vendors: Check Point Software Technologies Ltd. Products: FreeRDP Problem Types: CWE-120 Description: FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/FreeRDP/FreeRDP/commit/602f4a2e14b41703b5f431de3154cd46a5750a2d - https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
CVE ID: CVE-2018-8786 State: PUBLISHED Published: 2018-11-29T17:00:00Z Last Updated: 2024-09-17T01:56:15.397Z Vendors: Check Point Software Technologies Ltd. Products: FreeRDP Problem Types: CWE-680 Description: FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://lists.debian.org/debian-lts-announce/2019/02/msg00015.html - https://github.com/FreeRDP/FreeRDP/commit/445a5a42c500ceb80f8fa7f2c11f3682538033f3 -
s-announce/2019/02/msg00015.html - https://github.com/FreeRDP/FreeRDP/commit/445a5a42c500ceb80f8fa7f2c11f3682538033f3 - https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://access.redhat.com/errata/RHSA-2019:0697 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YVJKO2DR5EY4C4QZOP7SNNBEW2JW6FHX/ - https://usn.ubuntu.com/3845-2/
CVE ID: CVE-2018-8787 State: PUBLISHED Published: 2018-11-29T17:00:00Z Last Updated: 2024-09-16T20:16:21.329Z Vendors: Check Point Software Technologies Ltd. Products: FreeRDP Problem Types: CWE-680 Description: FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://lists.debian.org/debian-lts-announce/2019/02/msg00015.html - https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-rdp-attack-code-ex
unce/2019/02/msg00015.html - https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://github.com/FreeRDP/FreeRDP/commit/09b9d4f1994a674c4ec85b4947aa656eda1aed8a - https://access.redhat.com/errata/RHSA-2019:0697 - https://usn.ubuntu.com/3845-2/
CVE ID: CVE-2018-8788 State: PUBLISHED Published: 2018-11-29T17:00:00Z Last Updated: 2024-09-16T17:28:15.906Z Vendors: Check Point Software Technologies Ltd. Products: FreeRDP Problem Types: CWE-787 Description: FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://lists.debian.org/debian-lts-announce/2019/02/msg00015.html - https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - htt
https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://github.com/FreeRDP/FreeRDP/commit/d1112c279bd1a327e8e4d0b5f371458bf2579659 - https://access.redhat.com/errata/RHSA-2019:0697 - https://usn.ubuntu.com/3845-2/
CVE ID: CVE-2018-8789 State: PUBLISHED Published: 2018-11-29T18:00:00Z Last Updated: 2024-09-16T20:52:36.224Z Vendors: Check Point Software Technologies Ltd. Products: FreeRDP Problem Types: CWE-126 Description: FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/FreeRDP/FreeRDP/commit/2ee663f39dc8dac3d9988e847db19b2d7e3ac8c6 - https://lists.debian.org/debian-lts-announce/2019/02/msg00015.html - https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-
rg/debian-lts-announce/2019/02/msg00015.html - https://usn.ubuntu.com/3845-1/ - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://usn.ubuntu.com/3845-2/
CVE ID: CVE-2018-8790 State: PUBLISHED Published: 2019-03-01T16:00:00 Last Updated: 2024-08-05T07:02:26.125Z Vendors: Check Point Software Technologies Ltd. Products: ZoneAlarm Problem Types: CWE-863 Description: Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.062.17802 - https://www.zonealarm.com/software/release-history/zafree.html#15.4.062.17802 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid
.4.062.17802 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk142952 - http://www.securityfocus.com/bid/107254
CVE ID: CVE-2018-8791 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-16T23:55:45.181Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-126 Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/s
201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8792 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-17T02:17:12.258Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-126 Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https:/
.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8793 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-17T00:51:39.691Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-122 Description: rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-co
5010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8794 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-17T00:21:28.777Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-680 Description: rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updates() and results in a memory corruption and possibly even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkp
p/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8795 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-16T17:44:07.261Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-680 Description: rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitmap_updates() and results in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.
desktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8796 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-16T18:13:06.078Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-126 Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Service (segfault). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - http
ity.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8797 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-16T22:35:27.535Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-122 Description: rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that results in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-exe
dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8798 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-16T19:36:49.450Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-126 Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian
/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8799 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-17T03:17:41.670Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-126 Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - htt
rity.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-8800 State: PUBLISHED Published: 2019-02-05T20:00:00Z Last Updated: 2024-09-16T23:51:45.506Z Vendors: Check Point Software Technologies Ltd. Products: rdesktop Problem Types: CWE-122 Description: rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() that results in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-co
CVE ID: CVE-2018-8801 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:02:26.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/301924 - https://gitlab.com/gitlab-org/gitlab-ce/blob/master/CHANGELOG.md - https://gitlab.com/gitlab-org/gitlab-ce/issues/41642
CVE ID: CVE-2018-8802 State: PUBLISHED Published: 2018-03-26T21:00:00 Last Updated: 2024-08-05T07:02:26.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the management interface in ePortal Manager allows remote attackers to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=49
CVE ID: CVE-2018-8804 State: PUBLISHED Published: 2018-03-20T05:00:00 Last Updated: 2024-08-05T07:02:26.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103498 - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/1025 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2018-8805 State: PUBLISHED Published: 2018-03-20T05:00:00 Last Updated: 2024-08-05T07:02:26.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yxcms building system (compatible cell phone) v1.4.7 has XSS via the content parameter to protected\apps\default\view\default\extend_guestbook.php or protected\apps\default\view\mobile\extend_guestbook.php in an index.php?r=default/column/index&col=guestbook request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/QQ704568679/YXcms-Code-audit/blob/master/Yxcms%20Code%20audit
CVE ID: CVE-2018-8806 State: PUBLISHED Published: 2018-03-20T05:00:00 Last Updated: 2024-08-05T07:02:26.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c. Remote attackers could use this vulnerability to cause a denial-of-service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/128
CVE ID: CVE-2018-8807 State: PUBLISHED Published: 2018-03-20T05:00:00 Last Updated: 2024-08-05T07:02:26.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/129
CVE ID: CVE-2018-8808 State: PUBLISHED Published: 2018-03-20T05:00:00 Last Updated: 2024-08-05T07:02:26.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/9725
CVE ID: CVE-2018-8809 State: PUBLISHED Published: 2018-03-20T05:00:00 Last Updated: 2024-08-05T07:02:26.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/9726
CVE ID: CVE-2018-8810 State: PUBLISHED Published: 2018-03-20T05:00:00 Last Updated: 2024-08-05T07:02:26.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/9727
CVE ID: CVE-2018-8811 State: PUBLISHED Published: 2018-03-20T07:00:00 Last Updated: 2024-08-05T07:02:26.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only registered users to upload different kind of content artifacts (SVG, .doc, .docx). The uploaded content is stored in the CMS content repository "as is". In case of scripts inside an SVG, this may or may not be "malicious", there is no way of knowin
tent repository "as is". In case of scripts inside an SVG, this may or may not be "malicious", there is no way of knowing if the uploaded SVG contains the script for a reason. To exploit the "issue", a user must have an account in the CMS as a content manager Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alkacon/opencms-core/issues/586 - https://www.exploit-db.com/exploits/44391/
CVE ID: CVE-2018-8812 State: REJECTED Published: 2019-05-10T19:49:59 Last Updated: 2019-05-15T16:17:00 Description: No description available.
CVE ID: CVE-2018-8813 State: PUBLISHED Published: 2018-04-04T15:00:00 Last Updated: 2024-08-05T07:02:26.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfcms/wolfcms/issues/670 - https://www.exploit-db.com/exploits/44421/ - https://docs.google.com/document/d/1rdl1yWDJkPuuOFb2sF07_c3twl5uMkH9a-OO2OmYMus/edit?usp=sharing
CVE ID: CVE-2018-8814 State: PUBLISHED Published: 2018-04-04T15:00:00 Last Updated: 2024-08-05T07:02:26.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requests that modify plugin/[pluginname]/settings by crafting a malicious request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfcms/wolfcms/issues/671 - https://www.exploit-db.com/exploits/44418/ - https://docs.google.com/document/d/19X9j9lMVrH7VPhyMEdqidqgW4VBhXaFibuBDyiPxJjc/edit?usp=sharing
CVE ID: CVE-2018-8815 State: PUBLISHED Published: 2018-03-20T07:00:00 Last Updated: 2024-08-05T07:02:26.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or HTML via a malicious SVG image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alkacon/opencms-core/issues/587 - https://www.exploit-db.com/exploits/44392/