Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9927 State: PUBLISHED Published: 2018-04-10T06:00:00 Last Updated: 2024-08-05T07:24:56.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a user account via index.php?m=member&f=index&v=add. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/7/ - https://github.com/wuzhicms/wuzhicms/issues/128
CVE ID: CVE-2018-9928 State: PUBLISHED Published: 2018-04-10T06:00:00 Last Updated: 2024-08-05T07:24:56.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Sm1L3ing/xss-in-metinfo/blob/master/README.md
CVE ID: CVE-2018-9934 State: PUBLISHED Published: 2018-04-10T07:00:00Z Last Updated: 2024-09-17T00:05:48.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnblogs.com/babers/p/8745739.html - http://www.cnblogs.com/babers/p/8503116.html
CVE ID: CVE-2018-9935 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.279Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addField method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the cu
orming operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5312. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-319 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9936 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.302Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-704 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of field elements. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the co
which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5370. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-320
CVE ID: CVE-2018-9937 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.357Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-704 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of subform elements. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the
, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5371. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-321
CVE ID: CVE-2018-9938 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.360Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-704 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the absPageSpan method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code und
ed data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5372. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-322 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9939 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.268Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-704 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of layout elements. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the
, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5373. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-323
CVE ID: CVE-2018-9940 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.358Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-704 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the layout sheet attribute. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code
pplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5374. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-324 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9941 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.286Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-704 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the record append method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code u
lied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5375. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-325 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9942 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.219Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-704 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the record remove method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code u
lied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5376. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-326 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9943 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.341Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-704 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the openList method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under
data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5377. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-327
CVE ID: CVE-2018-9944 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.267Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addLink method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the cur
rming operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5379. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-328
CVE ID: CVE-2018-9945 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.276Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the getField method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the cu
orming operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5382. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-329
CVE ID: CVE-2018-9946 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.302Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the setTimeOut method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulne
of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5471. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-330
CVE ID: CVE-2018-9947 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.256Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-122 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execut
ied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5472. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-331
CVE ID: CVE-2018-9948 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.445Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-824 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of typed arrays. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the c
prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5380. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-332 - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.exploit-db.com/exploits/44941/ - https://www.exploit-db.com/exploits/45269/
CVE ID: CVE-2018-9949 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.266Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-122 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIFF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execut
ied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5473. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-333 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9950 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.404Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with
data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5413. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-334
CVE ID: CVE-2018-9951 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.363Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CPDF_Object objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the c
ct prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5414. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-335
CVE ID: CVE-2018-9952 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.321Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA Button elements. When setting the formattedValue attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulner
y validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5527. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-336 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9953 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.350Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA resolveNodes method of Button elements. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code u
of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5528. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-337 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9954 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.303Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA Button elements. When setting the y attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to ex
e existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5529. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-338 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-9955 State: PUBLISHED Published: 2018-05-17T15:00:00 Last Updated: 2024-08-05T07:24:56.379Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA resolveNode method of Button elements. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code un
f an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5531. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-339