Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20129 State: PUBLISHED Published: 2018-12-13T08:00:00 Last Updated: 2024-08-05T11:51:19.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/select_images_post.php allows remote attackers to upload and execute arbitrary PHP code via a double extension and a modified ".php" substring, in conjunction with the image/jpeg content type, as demonstrated by the filename=1.jpg.p*hp value. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/88/
CVE ID: CVE-2018-20131 State: PUBLISHED Published: 2019-01-03T01:00:00 Last Updated: 2024-08-05T11:51:19.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user to manipulate symbolic links to escalate privileges, or show the contents of sensitive files that a regular user would not have access to. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106452 - https://code42.com/r/support/CVE-2018-20131
CVE ID: CVE-2018-20132 State: REJECTED Published: 2019-01-11T17:00:00 Last Updated: 2019-01-11T16:57:01 Description: No description available.
CVE ID: CVE-2018-20133 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T11:51:19.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: ymlref allows code injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dexter2206/ymlref/issues/2
CVE ID: CVE-2018-20135 State: PUBLISHED Published: 2019-06-07T15:45:01 Last Updated: 2024-08-05T11:51:19.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate, and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and
ethod to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://www.adyta.pt/en/2019/01/29/writeup-samsung-app-store-rce-via-mitm-2/
CVE ID: CVE-2018-20136 State: PUBLISHED Published: 2018-12-13T18:00:00Z Last Updated: 2024-09-17T02:16:19.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CCCCCrash/POCs/tree/master/Web/fuel-cms/xss2
CVE ID: CVE-2018-20137 State: PUBLISHED Published: 2018-12-13T18:00:00Z Last Updated: 2024-09-17T01:31:32.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CCCCCrash/POCs/tree/master/Web/fuel-cms/xss1
CVE ID: CVE-2018-20138 State: PUBLISHED Published: 2018-12-13T18:00:00Z Last Updated: 2024-09-17T01:50:38.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541. Additional Analyst Notes: - CVE Program Container: References: - https://suku90.wordpress.com/2018/12/13/php-b2b-script-stored-xss/
CVE ID: CVE-2018-20140 State: PUBLISHED Published: 2019-03-17T20:00:25 Last Updated: 2024-08-05T11:51:19.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151052/ZenPhoto-1.4.14-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2019/Jan/22 - https://github.com/zenphoto/zenphoto/commit/9db85fcf9cc97887b81f34f03dcb180fd74e57da - https://github.com/zenphoto/zenphoto/commit/695fb61707e4286b64f6e446c189b449bd07d00a - https://www.netsparker.com/web-applications-advisorie
enphoto/zenphoto/commit/695fb61707e4286b64f6e446c189b449bd07d00a - https://www.netsparker.com/web-applications-advisories/ns-18-043-cross-site-scripting-in-zenphoto/
CVE ID: CVE-2018-20141 State: PUBLISHED Published: 2019-03-17T20:04:05 Last Updated: 2024-08-05T11:51:19.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: AbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as demonstrated by a /apparel--accessories?sort= substring. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151305/Abantecart-1.2.12-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2019/Jan/59 - https://github.com/abantecart
CVE ID: CVE-2018-20144 State: PUBLISHED Published: 2019-03-28T14:53:12 Last Updated: 2024-08-05T11:51:19.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2018/12/13/critical-security-release-gitlab-11-dot-5-dot-4-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/55200
CVE ID: CVE-2018-20145 State: PUBLISHED Published: 2018-12-13T20:00:00 Last Updated: 2024-08-05T11:51:19.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/mosquitto/issues/1073 - https://github.com/eclipse/mosquitto/blob/master/ChangeLog.txt - https://github.com/eclipse/mosquitto/commit/9097577b49b7fdcf45d30975976dd93808ccc0c4
CVE ID: CVE-2018-20146 State: PUBLISHED Published: 2019-02-21T03:00:00 Last Updated: 2024-08-05T11:51:19.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Liquidware ProfileUnity before 6.8.0 with Liquidware FlexApp before 6.8.0. A local user could obtain administrator rights, as demonstrated by use of PowerShell. Additional Analyst Notes: - CVE Program Container: References: - https://www.liquidware.com/content/pdf/documents/support/Liquidware-ProfileUnity-Release-Notes.pdf
CVE ID: CVE-2018-20147 State: PUBLISHED Published: 2018-12-14T20:00:00 Last Updated: 2024-08-05T11:51:19.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended restrictions on deleting files. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9169 - http://www.securityfocus.com/bid/106220 - https://wordpress.org/support/wordpress-version/version-5-0-1/ - https://codex.wordpress.org/Version_4.9.9 - https://www.debian.org/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.or
/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html - https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
CVE ID: CVE-2018-20148 State: PUBLISHED Published: 2018-12-14T20:00:00 Last Updated: 2024-08-05T11:51:19.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection attacks via crafted metadata in a wp.getMediaItem XMLRPC call. This is caused by mishandling of serialized data at phar:// URLs in the wp_get_attachment_thumb_file function in wp-includes/post.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106220 - https://wordpress.org/support/wordpress-version/version-5-0-1/ - https://blog.secarma.co.uk/labs/near-phar-dangerous-unserializati
rdpress.org/support/wordpress-version/version-5-0-1/ - https://blog.secarma.co.uk/labs/near-phar-dangerous-unserialization-wherever-you-are - https://codex.wordpress.org/Version_4.9.9 - https://wpvulndb.com/vulnerabilities/9171 - https://www.zdnet.com/article/wordpress-vulnerability-affects-a-third-of-most-popular-websites-online/ - https://www.debian.org/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html - https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
CVE ID: CVE-2018-20149 State: PUBLISHED Published: 2018-12-14T20:00:00 Last Updated: 2024-08-05T11:51:19.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106220 - https://wordpress.org/support/wordpress-version/version-5-0-1/ - https://codex.wordpress.org/Version_4.9.9 - https://wpvulndb.com/vulnerabilities/9175 - https://github.com/WordPress/WordPress/c
codex.wordpress.org/Version_4.9.9 - https://wpvulndb.com/vulnerabilities/9175 - https://github.com/WordPress/WordPress/commit/246a70bdbfac3bd45ff71c7941deef1bb206b19a - https://www.debian.org/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html - https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
CVE ID: CVE-2018-20150 State: PUBLISHED Published: 2018-12-14T20:00:00 Last Updated: 2024-08-05T11:51:19.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106220 - https://wordpress.org/support/wordpress-version/version-5-0-1/ - https://codex.wordpress.org/Version_4.9.9 - https://wpvulndb.com/vulnerabilities/9173 - https://github.com/WordPress/WordPress/commit/fb3c6ea0618fcb9a51d4f2c1940e9efcd4a2d460 - https://www.debian.org/security/2019/dsa-4401 - https://wordpr
rdPress/commit/fb3c6ea0618fcb9a51d4f2c1940e9efcd4a2d460 - https://www.debian.org/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html - https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
CVE ID: CVE-2018-20151 State: PUBLISHED Published: 2018-12-14T20:00:00 Last Updated: 2024-08-05T11:51:19.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler if an unusual configuration were chosen. The search engine could then index and display a user's e-mail address and (rarely) the password that was generated by default. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106220 - https://wordpress.org/support/wordpress-version/version-5-0-1/ - https://wpvulndb.com/vulnerabilities/9174 - https://codex.wordpress.or
ss.org/support/wordpress-version/version-5-0-1/ - https://wpvulndb.com/vulnerabilities/9174 - https://codex.wordpress.org/Version_4.9.9 - https://www.debian.org/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html - https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
CVE ID: CVE-2018-20152 State: PUBLISHED Published: 2018-12-14T20:00:00 Last Updated: 2024-08-05T11:51:19.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106220 - https://wordpress.org/support/wordpress-version/version-5-0-1/ - https://codex.wordpress.org/Version_4.9.9 - https://wpvulndb.com/vulnerabilities/9170 - https://www.debian.org/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.org/deb
rity/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html - https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
CVE ID: CVE-2018-20153 State: PUBLISHED Published: 2018-12-14T20:00:00 Last Updated: 2024-08-05T11:51:19.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106220 - https://wordpress.org/support/wordpress-version/version-5-0-1/ - https://codex.wordpress.org/Version_4.9.9 - https://wpvulndb.com/vulnerabilities/9172 - https://www.debian.org/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - http
ps://www.debian.org/security/2019/dsa-4401 - https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/ - https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html - https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
CVE ID: CVE-2018-20154 State: PUBLISHED Published: 2018-12-14T22:00:00 Last Updated: 2024-08-05T11:51:19.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/
CVE ID: CVE-2018-20155 State: PUBLISHED Published: 2018-12-14T22:00:00 Last Updated: 2024-08-05T11:51:19.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/
CVE ID: CVE-2018-20156 State: PUBLISHED Published: 2018-12-14T22:00:00 Last Updated: 2024-08-05T11:51:19.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/
CVE ID: CVE-2018-20157 State: PUBLISHED Published: 2018-12-14T23:00:00 Last Updated: 2024-08-05T11:51:19.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenRefine/OpenRefine/issues/1907
CVE ID: CVE-2018-20159 State: PUBLISHED Published: 2018-12-15T05:00:00Z Last Updated: 2024-09-16T20:11:52.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated user with the administrator role to upload arbitrary files to the main website directory. Exploitation involves uploading a ".php" file within a ".zip" file because a ZIP archive is accepted by /admin/?req=modules&action=add as a plugin, and extracted to the main directory. In order for the ".zip" file to be accepted, it must also contain a package.json file. Additional Analyst Notes: - C
ry. In order for the ".zip" file to be accepted, it must also contain a package.json file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45957 - https://pentest.com.tr/exploits/i-doit-CMDB-1-11-2-Remote-Code-Execution.html
CVE ID: CVE-2018-20160 State: PUBLISHED Published: 2019-05-29T21:12:00 Last Updated: 2024-08-05T11:51:19.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://bugzilla.zimbra.com/show_bug.cgi?id=109093
CVE ID: CVE-2018-20161 State: PUBLISHED Published: 2018-12-15T06:00:00 Last Updated: 2024-08-05T11:51:19.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: A design flaw in the BlinkForHome (aka Blink For Home) Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips (triggered by the motion sensor) are not saved if the attacker's traffic (such as Dot11Deauth) successfully disconnects the Sync Module from the Wi-Fi network. (Access to live video from the app also becomes unavailable.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Jacquais/BlinkVuln
CVE ID: CVE-2018-20162 State: PUBLISHED Published: 2019-03-17T20:15:59 Last Updated: 2024-08-05T11:51:19.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Feb/34 - http://packetstormsecurity.com/files/151719/Digi-TransPort-LR54-Restricted-Shell-Escape.html - https://blog.hackeriet.no/cve-2018-20162-digi-lr54-restricted-shell-escape/
CVE ID: CVE-2018-20164 State: PUBLISHED Published: 2019-02-13T14:00:00 Last Updated: 2024-08-05T11:51:19.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service (ReDoS) issue allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to a value containing a long digit string. (The UAP-Core project contains the vulnerability, propagating to all implementations.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ua-parser/uap-core/commit/010ccdc7303546cd22b9da687c29f4a996990014 - ht
gram Container: References: - https://github.com/ua-parser/uap-core/commit/010ccdc7303546cd22b9da687c29f4a996990014 - https://github.com/ua-parser/uap-core/commit/156f7e12b215bddbaf3df4514c399d683e6cdadc - https://www.x41-dsec.de/lab/advisories/x41-2018-009-uaparser/ - https://github.com/ua-parser/uap-core/issues/332
CVE ID: CVE-2018-20165 State: PUBLISHED Published: 2019-03-22T19:26:07 Last Updated: 2024-08-05T11:51:19.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hect0rS/Reflected-XSS-on-Opentext-Portal-v7.4.4/blob/master/readme.md
CVE ID: CVE-2018-20166 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T11:51:19.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file-upload vulnerability exists in Rukovoditel 2.3.1. index.php?module=configuration/save allows the user to upload a background image, and mishandles extension checking. It accepts uploads of PHP content if the first few characters match GIF data, and the filename ends in ".php" with mixed case, such as the .pHp extension. Additional Analyst Notes: - CVE Program Container: References: - https://pentest.com.tr/exploits/Rukovoditel-Project-Management-CRM-2-3-1-Authenticated-Remote-Code-Execution.html - https://www.exploit-d
om.tr/exploits/Rukovoditel-Project-Management-CRM-2-3-1-Authenticated-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/46011
CVE ID: CVE-2018-20167 State: PUBLISHED Published: 2018-12-17T05:00:00 Last Updated: 2024-08-05T11:51:19.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as demonstrated by an unsafe "cat README.md" command when \e}pn is used. A popmedia control sequence can allow the malicious execution of executable file formats registered in the X desktop share MIME types (/usr/share/applications). The control sequence defers unknown file types to the handle_unknown_media() function, which executes xdg-open against the filename specified in the sequence. The use of xdg-open for all unknown file types allow
h executes xdg-open against the filename specified in the sequence. The use of xdg-open for all unknown file types allows executable file formats with a registered shared MIME type to be executed. An attacker can achieve remote code execution by introducing an executable file and a plain text file containing the control sequence through a fake software project (e.g., in Git or a tarball). When the control sequence is rendered (such as with cat), the executable file will be run. Additional Analyst Notes: - CVE Program Container: References: - https://www.enlightenment.org/news/2018-12-16-terminology-1.3.1 - https://phab.enlightenment.org/T7504 - https://phab.enlightenment.org/rTRM1ac204da9148
ws/2018-12-16-terminology-1.3.1 - https://phab.enlightenment.org/T7504 - https://phab.enlightenment.org/rTRM1ac204da9148e7bccb1b5f34b523e2094dfc39e2
CVE ID: CVE-2018-20168 State: PUBLISHED Published: 2018-12-17T05:00:00 Last Updated: 2024-08-05T11:51:19.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1674