Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-14737 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A NULL pointer dereference can occur in pbc_wmessage_string in wmessage.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/122#issuecomment-407303005
CVE ID: CVE-2018-14738 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_rmessage_message in rmessage.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/122#issuecomment-407309546
CVE ID: CVE-2018-14739 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_set_default in pattern.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/122#issuecomment-407323971
CVE ID: CVE-2018-14740 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c while making a query. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/122#issuecomment-407363750
CVE ID: CVE-2018-14741 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_pack in pattern.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/122#issuecomment-407367289
CVE ID: CVE-2018-14742 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c during a memcpy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/122#issuecomment-407368019
CVE ID: CVE-2018-14743 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in wiretype_decode in context.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/122#issuecomment-407367002
CVE ID: CVE-2018-14744 State: PUBLISHED Published: 2018-07-29T18:00:00 Last Updated: 2024-08-05T09:38:13.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A use-after-free can occur in _pbcM_sp_query in map.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/125#issue-343980779
CVE ID: CVE-2018-14745 State: PUBLISHED Published: 2019-03-15T22:00:00 Last Updated: 2024-08-05T09:38:13.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is SVE-2018-12029. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/tmFrECnZ - https://security.samsungmobile.com/securityUpdate.smsb - https://github.com/securesystemslab/periscope/blob/master/bugs-foun
s://security.samsungmobile.com/securityUpdate.smsb - https://github.com/securesystemslab/periscope/blob/master/bugs-found/CVE-2018-14745.md
CVE ID: CVE-2018-14746 State: PUBLISHED Published: 2018-11-28T16:00:00 Last Updated: 2024-08-05T09:38:13.607Z Vendors: QNAP Products: QNAP QTS Problem Types: Command Injection Description: Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to run arbitrary commands on the NAS. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/nas-201811-22
CVE ID: CVE-2018-14747 State: PUBLISHED Published: 2018-11-28T16:00:00 Last Updated: 2024-08-05T09:38:13.416Z Vendors: QNAP Products: QNAP QTS Problem Types: NULL Pointer Dereference Description: NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to crash the NAS media server. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/nas-201811-22
CVE ID: CVE-2018-14748 State: PUBLISHED Published: 2018-11-28T16:00:00 Last Updated: 2024-08-05T09:38:13.370Z Vendors: QNAP Products: QNAP QTS Problem Types: Improper Authorization Description: Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to power off the NAS. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/nas-201811-22
CVE ID: CVE-2018-14749 State: PUBLISHED Published: 2018-11-28T16:00:00 Last Updated: 2024-08-05T09:38:13.322Z Vendors: QNAP Products: QNAP QTS Problem Types: Buffer Overflow Description: Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/nas-201811-22
CVE ID: CVE-2018-14767 State: PUBLISHED Published: 2018-07-31T06:00:00 Last Updated: 2024-08-05T09:38:13.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4267 - https://lists.debian.org/debian-lts-announce/2018/08/msg00018.html - https://skala
w.debian.org/security/2018/dsa-4267 - https://lists.debian.org/debian-lts-announce/2018/08/msg00018.html - https://skalatan.de/blog/advisory-hw-2018-05
CVE ID: CVE-2018-14768 State: PUBLISHED Published: 2018-08-29T19:00:00 Last Updated: 2024-08-05T09:38:13.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf - https://www.vivotek.com/website/support/cybersecurity/
CVE ID: CVE-2018-14769 State: PUBLISHED Published: 2018-09-05T21:00:00 Last Updated: 2024-08-05T09:38:13.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF. Additional Analyst Notes: - CVE Program Container: References: - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-004-v1.pdf - https://www.vivotek.com/website/support/cybersecurity
CVE ID: CVE-2018-14770 State: PUBLISHED Published: 2018-09-05T21:00:00 Last Updated: 2024-08-05T09:38:13.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service). Additional Analyst Notes: - CVE Program Container: References: - https://www.vivotek.com/website/support/cybersecurity/ - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf
CVE ID: CVE-2018-14771 State: PUBLISHED Published: 2018-09-05T21:00:00 Last Updated: 2024-08-05T09:38:13.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.vivotek.com/website/support/cybersecurity/ - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf
CVE ID: CVE-2018-14772 State: PUBLISHED Published: 2018-10-16T22:00:00 Last Updated: 2024-08-05T09:38:13.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web application can execute arbitrary code on the underlying system via Command Injection. Additional Analyst Notes: - CVE Program Container: References: - http://coastalsec.io/cve-2018-14772-remote-code-execution
CVE ID: CVE-2018-14773 State: PUBLISHED Published: 2018-08-03T17:00:00 Last Updated: 2024-08-05T09:38:13.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises from support for a (legacy) IIS header that lets users override the path in the request URL via the X-Original-URL or X-Rewrite-URL HTTP request header. These headers are designed for IIS support, but it's not verified that the server is in fact running IIS, which means anybody who can send these requests to an application can tri
rified that the server is in fact running IIS, which means anybody who can send these requests to an application can trigger this. This affects \Symfony\Component\HttpFoundation\Request::prepareRequestUri() where X-Original-URL and X_REWRITE_URL are both used. The fix drops support for these methods so that they cannot be used as attack vectors such as web cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104943 - https://www.drupal.org/SA-CORE-2018-005 - https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html - https://symfony.com/blog/cve-2018-14773-remove-support-for-legacy-and-risky-http-headers - https://github.
g00009.html - https://symfony.com/blog/cve-2018-14773-remove-support-for-legacy-and-risky-http-headers - https://github.com/symfony/symfony/commit/e447e8b92148ddb3d1956b96638600ec95e08f6b - http://www.securitytracker.com/id/1041405 - https://www.debian.org/security/2019/dsa-4441 - https://seclists.org/bugtraq/2019/May/21
CVE ID: CVE-2018-14774 State: PUBLISHED Published: 2018-08-03T17:00:00 Last Updated: 2024-08-05T09:38:13.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/symfony/symfony/commit/725dee4cd8b4ccd52e335ae4b4522242cea9bd4a - https://symfony.com/blog/c
ences: - https://github.com/symfony/symfony/commit/725dee4cd8b4ccd52e335ae4b4522242cea9bd4a - https://symfony.com/blog/cve-2018-14774-possible-host-header-injection-when-using-httpcache
CVE ID: CVE-2018-14775 State: PUBLISHED Published: 2018-08-01T06:00:00 Last Updated: 2024-08-05T09:38:13.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorrect I/O port access control on the i386 architecture. Additional Analyst Notes: - CVE Program Container: References: - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/gdt.c.diff?r1=1.37&r2=1.37.8.1&f=h - https://ftp.openbsd.org/pub/OpenBSD/patches/6.3/common/015_ioport.patch.sig - https://ftp.openbsd.org/pub/OpenBSD/patches/6.2/common/020_ioport.patch.sig - http://www.securitytracker.com/id/10
sig - https://ftp.openbsd.org/pub/OpenBSD/patches/6.2/common/020_ioport.patch.sig - http://www.securitytracker.com/id/1041550 - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/gdt.c
CVE ID: CVE-2018-14776 State: PUBLISHED Published: 2018-08-01T06:00:00Z Last Updated: 2024-09-16T16:13:44.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://www.clickstudios.com.au/about/secure-code-data.aspx - https://www.clickstudios.com.au/passwordstate-changelog.aspx
CVE ID: CVE-2018-14777 State: PUBLISHED Published: 2018-08-01T19:00:00Z Last Updated: 2024-09-16T21:58:05.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related to the /addnews.html and /index.php?do=addnews URIs) to send a malicious script to unsuspecting Admins or users. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018080003
CVE ID: CVE-2018-14779 State: PUBLISHED Published: 2018-08-15T18:00:00 Last Updated: 2024-08-05T09:38:13.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `ykpiv_transfer_data()`: {% highlight c %} if(*out_len + recv_len - 2 > max_out) { fprintf(stderr, "Output buffer to small, wanted to write %lu, max was %lu.", *out_len + recv_len - 2, max_out); } if(out_data) { memcpy(out_data, data, recv_len - 2); out_data += recv_len - 2; *out_len += recv_len - 2; } {% endhighlight %} -- it is clearly checked whether the buffer is big enough to h
v_len - 2; *out_len += recv_len - 2; } {% endhighlight %} -- it is clearly checked whether the buffer is big enough to hold the data copied using `memcpy()`, but no error handling happens to avoid the `memcpy()` in such cases. This code path can be triggered with malicious data coming from a smartcard. Additional Analyst Notes: - CVE Program Container: References: - https://www.yubico.com/support/security-advisories/ysa-2018-03/ - https://www.x41-dsec.de/lab/advisories/x41-2018-001-Yubico-Piv/ - http://www.openwall.com/lists/oss-security/2018/08/14/2 - https://usn.ubuntu.com/4276-1/
CVE ID: CVE-2018-14780 State: PUBLISHED Published: 2018-08-15T18:00:00 Last Updated: 2024-08-05T09:38:13.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `_ykpiv_fetch_object()`: {% highlight c %} if(sw == SW_SUCCESS) { size_t outlen; int offs = _ykpiv_get_length(data + 1, &outlen); if(offs == 0) { return YKPIV_SIZE_ERROR; } memmove(data, data + 1 + offs, outlen); *len = outlen; return YKPIV_OK; } else { return YKPIV_GENERIC_ERROR; } {% endhighlight %} -- in the end, a `memmove()` occurs with a length retrieved from APDU data. Th
YKPIV_GENERIC_ERROR; } {% endhighlight %} -- in the end, a `memmove()` occurs with a length retrieved from APDU data. This length is not checked for whether it is outside of the APDU data retrieved. Therefore the `memmove()` could copy bytes behind the allocated data buffer into this buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.yubico.com/support/security-advisories/ysa-2018-03/ - https://www.x41-dsec.de/lab/advisories/x41-2018-001-Yubico-Piv/ - http://www.openwall.com/lists/oss-security/2018/08/14/2 - https://usn.ubuntu.com/4276-1/
CVE ID: CVE-2018-14781 State: PUBLISHED Published: 2018-08-13T22:00:00Z Last Updated: 2025-05-22T16:33:08.385Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Medtronic Products: MMT- 508 - MiniMed pump, MMT – 511 pump Paradigm, MMT – 512 / MMT – 712 Paradigm x12, MMT – 515 / MMT – 715 Paradigm x15, MMT – 522 / MMT – 722 Paradigm REAL-TIME, MMT – 522(K) / MMT – 722(K) Paradigm REAL-TIME, MMT – 523 / MMT – 723 Paradigm Revel, MMT – 523(K) / MMT – 723(K) Paradigm, MMT – 554 / MMT – 754 MiniMed Veo, MMT – 551 / MMT – 751 MiniMed 530G Problem Types: CWE-294 Description: Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus
ypes: CWE-294 Description: Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html - https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02 - http://www.securityfocus.com/bid/105044
CVE ID: CVE-2018-14782 State: PUBLISHED Published: 2018-08-10T19:00:00Z Last Updated: 2024-09-16T17:34:12.905Z Vendors: ICS-CERT Products: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. Problem Types: CWE-200 Description: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The device allows access to configuration files and profiles without authenticating the user. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-221-02 - http://www.securityfocus.com/bid/105053
CVE ID: CVE-2018-14783 State: PUBLISHED Published: 2018-08-10T19:00:00Z Last Updated: 2024-09-16T16:13:07.238Z Vendors: ICS-CERT Products: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. Problem Types: CWE-352 Description: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-221-02 - http://www.securityfocus.com/bid/105053
CVE ID: CVE-2018-14784 State: PUBLISHED Published: 2018-08-10T19:00:00Z Last Updated: 2024-09-16T22:29:45.384Z Vendors: ICS-CERT Products: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. Problem Types: CWE-79 Description: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The device is vulnerable to several cross-site scripting attacks, allowing a remote attacker to run arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-221-02 - http://www.securityfocus.com/bid/105053
CVE ID: CVE-2018-14785 State: PUBLISHED Published: 2018-08-10T19:00:00Z Last Updated: 2024-09-17T03:27:55.496Z Vendors: ICS-CERT Products: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. Problem Types: CWE-548 Description: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-221-02 - http://www.securityfocus.com/bid/105053
CVE ID: CVE-2018-14786 State: PUBLISHED Published: 2018-08-23T19:00:00Z Last Updated: 2024-09-17T04:14:48.162Z Vendors: Becton, Dickinson and Company Products: Alaris GS, Alaris GH, Alaris CC, and Alaris TIVA Problem Types: CWE-287 Description: Becton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH, Alaris CC, and Alaris TIVA) versions 2.3.6 and prior are affected by an improper authentication vulnerability where the software does not perform authentication for functionality that requires a provable user identity, where it may allow a remote attacker to gain unauthorized access to various Alaris Syringe pumps and impact the intended operation of the
w a remote attacker to gain unauthorized access to various Alaris Syringe pumps and impact the intended operation of the pump when it is connected to a terminal server via the serial port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105147 - http://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-for-various-alaris-plus-syringe-pumps-sold-and-in-use-outside-the-united-states - https://ics-cert.us-cert.gov/advisories/ICSMA-18-235-01
CVE ID: CVE-2018-14787 State: PUBLISHED Published: 2018-08-22T18:00:00Z Last Updated: 2024-09-16T18:59:28.155Z Vendors: Philips Products: IntelliSpace Cardiovascular (ISCV) products Problem Types: CWE-269 Description: In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalated privileges could access folders which contain executables where authenticated users have write permissions, and could then execute arbitrary code with local administrative permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - https:
Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01
CVE ID: CVE-2018-14788 State: PUBLISHED Published: 2018-10-01T13:00:00Z Last Updated: 2024-09-17T01:35:37.005Z Vendors: Fuji Electric Products: Alpha5 Smart Loader Problem Types: CWE-120 Description: Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105411 - https://ics-cert.us-cert.gov/advisories/ICSA-18-270-02
CVE ID: CVE-2018-14789 State: PUBLISHED Published: 2018-08-22T18:00:00Z Last Updated: 2024-09-16T17:18:12.900Z Vendors: Philips Products: IntelliSpace Cardiovascular (ISCV) products Problem Types: CWE-428 Description: In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may allow an attacker to execute arbitrary code and escalate their level of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-0
.philips.com/healthcare/about/customer-support/product-security - https://ics-cert.us-cert.gov/advisories/ICSMA-18-226-01