Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6254 State: PUBLISHED Published: 2018-05-10T14:00:00Z Last Updated: 2024-09-16T17:08:29.755Z Vendors: Nvidia Corporation Products: Android Problem Types: Information Disclosure Description: In Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of-bounds read (due to improper input validation) vulnerability which could lead to local information disclosure. This issue is rated as moderate. Android: A-64340684. Reference: N-CVE-2018-6254. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-05-01
CVE ID: CVE-2018-6257 State: PUBLISHED Published: 2018-08-31T21:00:00Z Last Updated: 2024-09-16T17:43:39.449Z Vendors: Nvidia Corporation Products: NVIDIA GeForce Experience Problem Types: Information Disclosure Description: NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service, escalation of privileges, or both. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4685
CVE ID: CVE-2018-6258 State: PUBLISHED Published: 2018-08-31T21:00:00Z Last Updated: 2024-09-17T02:26:31.877Z Vendors: Nvidia Corporation Products: NVIDIA GeForce Experience Problem Types: Information Disclosure Description: NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system access can potentially conduct a Man-in-the-Middle (MitM) attack to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4685
CVE ID: CVE-2018-6259 State: PUBLISHED Published: 2018-08-31T21:00:00Z Last Updated: 2024-09-17T01:20:55.394Z Vendors: Nvidia Corporation Products: NVIDIA GeForce Experience Problem Types: Information Disclosure Description: NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled, an attacker has system access, and certain system features are enabled, where limited information disclosure may be possible. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4685
CVE ID: CVE-2018-6260 State: PUBLISHED Published: 2018-11-13T18:00:00 Last Updated: 2024-08-05T06:01:47.983Z Vendors: Nvidia Corporation Products: GPU Graphics Driver Problem Types: Information Disclosure Description: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - https://usn.ubuntu.com/3904-1/ - https://nvidia.custhelp.com/app/answers/detail/a_id/4738 - http://suppor
il/a_id/4772 - https://usn.ubuntu.com/3904-1/ - https://nvidia.custhelp.com/app/answers/detail/a_id/4738 - http://support.lenovo.com/us/en/solutions/LEN-26250
CVE ID: CVE-2018-6261 State: PUBLISHED Published: 2018-10-02T17:00:00Z Last Updated: 2024-09-17T02:06:44.561Z Vendors: Nvidia Corporation Products: GeForce Experience Problem Types: Code execution, denial of service, or escalation of privileges Description: NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execution, denial of service, or escalation of privileges by users with system access. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4725
CVE ID: CVE-2018-6262 State: PUBLISHED Published: 2018-10-02T17:00:00Z Last Updated: 2024-09-16T16:59:01.642Z Vendors: Nvidia Corporation Products: GeForce Experience Problem Types: Information disclosure Description: NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users with system access, which may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4725
CVE ID: CVE-2018-6263 State: PUBLISHED Published: 2018-11-27T18:00:00Z Last Updated: 2024-09-17T02:00:32.427Z Vendors: Nvidia Corporation Products: GeForce Experience Problem Types: Escalation of privileges Description: NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library (DLL) during application installation, which may lead to escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4740 - https://support.lenovo.com/us/en/product_security/LEN-25444
CVE ID: CVE-2018-6265 State: PUBLISHED Published: 2018-11-27T18:00:00Z Last Updated: 2024-09-16T18:55:53.557Z Vendors: Nvidia Corporation Products: GeForce Experience Problem Types: Escalation of privileges Description: NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during application installation on Windows 7 in elevated privilege mode, where a local user who initiates a browser session may obtain escalation of privileges on the browser. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4740 - https://support.lenovo.com/us/en/product_security/LEN-25444
CVE ID: CVE-2018-6266 State: PUBLISHED Published: 2018-11-27T18:00:00Z Last Updated: 2024-09-16T22:45:56.617Z Vendors: Nvidia Corporation Products: GeForce Experience Problem Types: Information Disclosure Description: NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters, which may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4740 - https://support.lenovo.com/us/en/product_security/LEN-25444
CVE ID: CVE-2018-6267 State: PUBLISHED Published: 2019-02-13T22:00:00Z Last Updated: 2024-09-16T18:34:50.405Z Vendors: Nvidia Corporation Products: Android Problem Types: Denial of Service, Escalation of Privileges Description: NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that can affect the control flow or data flow of a program, which may lead to denial of service or escalation of privileges. Android ID: A-70857947. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106846 - https://source.android.com/security/bulletin/2019-02-01 - https://nvidia.custhelp
p://www.securityfocus.com/bid/106846 - https://source.android.com/security/bulletin/2019-02-01 - https://nvidia.custhelp.com/app/answers/detail/a_id/4787 - https://nvidia.custhelp.com/app/answers/detail/a_id/4804 - https://nvidia.custhelp.com/app/answers/detail/a_id/4910
CVE ID: CVE-2018-6268 State: PUBLISHED Published: 2019-02-13T22:00:00Z Last Updated: 2024-09-17T00:51:22.066Z Vendors: Nvidia Corporation Products: Android Problem Types: Denial of Service, Escalation of Privileges Description: NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial of service or possible escalation of privileges. Android ID: A-80433161. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106846 - https://source.android.com/security/bulletin/2019-02-01 - https://nvidia.custhelp.com/app/answers/detail/a_id/4787 - https://nvidia.custhelp.com/app/answ
ty/bulletin/2019-02-01 - https://nvidia.custhelp.com/app/answers/detail/a_id/4787 - https://nvidia.custhelp.com/app/answers/detail/a_id/4804 - https://nvidia.custhelp.com/app/answers/detail/a_id/4910
CVE ID: CVE-2018-6269 State: PUBLISHED Published: 2019-04-12T16:25:45 Last Updated: 2024-08-05T06:01:48.548Z Vendors: NVIDIA Products: Jetson Tegra TX2 Problem Types: Code execution, denial of service, escalation of privileges, information disclosure Description: NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-trusted pointer dereference, which may lead to information disclosure, denial of service, escalation of privileges, or code execution. The updates apply to all versions prior to R28.3. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answ
ns prior to R28.3. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4787 - https://nvidia.custhelp.com/app/answers/detail/a_id/4804
CVE ID: CVE-2018-6271 State: PUBLISHED Published: 2019-02-13T22:00:00Z Last Updated: 2024-09-16T23:20:29.126Z Vendors: Nvidia Corporation Products: Android Problem Types: Denial of Service, Escalation of Privileges Description: NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not properly validated the extra data, which may lead to denial of service or escalation of privileges. Android ID: A-80198474. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106846 - https://source.android.com/security/bulletin/2019-02-01 - https://nvidia.custhelp.com/app/answers/detail/a
/bid/106846 - https://source.android.com/security/bulletin/2019-02-01 - https://nvidia.custhelp.com/app/answers/detail/a_id/4787 - https://nvidia.custhelp.com/app/answers/detail/a_id/4910
CVE ID: CVE-2018-6288 State: PUBLISHED Published: 2018-02-06T15:00:00Z Last Updated: 2024-09-17T01:26:06.653Z Vendors: Kaspersky Labs Products: Kaspersky Secure Mail Gateway Problem Types: Cross-site Request Forgery leading to Administrative account takeover Description: Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability.aspx?el=12430#010218 - https://www.coresecurity.com/advisories/kaspersky-secure-mail-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6289 State: PUBLISHED Published: 2018-02-06T15:00:00Z Last Updated: 2024-09-17T04:24:10.912Z Vendors: Kaspersky Labs Products: Kaspersky Secure Mail Gateway Problem Types: Configuration file injection leading to Code Execution as Root Description: Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability.aspx?el=12430#010218 - https://www.coresecurity.com/advisories/kaspersky-secure-mail-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6290 State: PUBLISHED Published: 2018-02-06T15:00:00Z Last Updated: 2024-09-17T00:05:28.247Z Vendors: Kaspersky Labs Products: Kaspersky Secure Mail Gateway Problem Types: Local Privilege Escalation Description: Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability.aspx?el=12430#010218 - https://www.coresecurity.com/advisories/kaspersky-secure-mail-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6291 State: PUBLISHED Published: 2018-02-06T15:00:00Z Last Updated: 2024-09-17T02:41:07.957Z Vendors: Kaspersky Labs Products: Kaspersky Secure Mail Gateway Problem Types: WebConsole Cross-Site Scripting Description: WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability.aspx?el=12430#010218 - https://www.coresecurity.com/advisories/kaspersky-secure-mail-gateway-multiple-vulnerabilities
CVE ID: CVE-2018-6292 State: PUBLISHED Published: 2018-02-13T13:00:00Z Last Updated: 2024-09-16T17:58:33.347Z Vendors: Kofax Products: Saperion Web Client Problem Types: Remote code execution Description: Remote Code Execution in Saperion Web Client version 7.5.2 83166. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/alerts/2018/02/12/multiple-vulnerabilities-found-in-popular-document-management-system/ - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/02/09/klcert-18-001-saperion-webclient-multiple-vulnerabilities-remote-code-execution-with-system-user-privileges-in-saperion-web-client/
CVE ID: CVE-2018-6293 State: PUBLISHED Published: 2018-02-13T13:00:00Z Last Updated: 2024-09-16T19:40:18.674Z Vendors: Kofax Products: Saperion Web Client Problem Types: Arbitrary File Read Description: Arbitrary File Read in Saperion Web Client version 7.5.2 83166. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/alerts/2018/02/12/multiple-vulnerabilities-found-in-popular-document-management-system/ - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/02/09/klcert-18-002-saperion-webclient-multiple-vulnerabilities-arbitrary-file-read-in-saperion-web-client/
CVE ID: CVE-2018-6294 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-17T02:06:14.470Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Unsecured way of firmware update Description: Unsecured way of firmware update in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6295 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-16T16:37:40.649Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Unencrypted way of remote control and communications Description: Unencrypted way of remote control and communications in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6296 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-17T00:11:58.807Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: An undocumented (hidden) capability for switching the web interface Description: An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6297 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-16T19:04:07.707Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Buffer overflow Description: Buffer overflow in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6298 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-16T19:57:37.066Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Remote code execution Description: Remote code execution in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6299 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-16T20:17:25.837Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Authentication bypass Description: Authentication bypass in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6300 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-17T04:05:14.739Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Remote password change Description: Remote password change in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6301 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-17T01:30:57.580Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Arbitrary camera access and monitoring via cloud Description: Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6302 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-16T18:19:11.700Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Denial of service by blocking of new camera registration on the cloud server Description: Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6303 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-17T02:00:37.904Z Vendors: Hanwha Techwin Products: Hanwha Techwin Smartcams Problem Types: Denial of service by uploading malformed firmware Description: Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams Additional Analyst Notes: - CVE Program Container: References: - https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/
CVE ID: CVE-2018-6304 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-16T18:09:19.140Z Vendors: Gemalto Products: Gemalto's Sentinel LDK RTE Problem Types: Stack overflow in custom XML-parser leads to remote denial of service Description: Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-566773.pdf - https://sentinel.gemalto.com/technical-support/security-updates-sm/
CVE ID: CVE-2018-6305 State: PUBLISHED Published: 2018-03-13T17:00:00Z Last Updated: 2024-09-17T03:17:47.482Z Vendors: Gemalto Products: Gemalto's Sentinel LDK RTE Problem Types: Denial of service Description: Denial of service in Gemalto's Sentinel LDK RTE version before 7.65 Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-566773.pdf - https://sentinel.gemalto.com/technical-support/security-updates-sm/
CVE ID: CVE-2018-6306 State: PUBLISHED Published: 2018-04-19T13:00:00Z Last Updated: 2024-09-17T01:30:42.840Z Vendors: Kaspersky Lab Products: Kaspersky Password Manager Problem Types: Unauthorized code execution from specific DLL Description: Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/vulnerability.aspx?el=12430#120418
CVE ID: CVE-2018-6307 State: PUBLISHED Published: 2018-12-19T16:00:00 Last Updated: 2024-08-05T06:01:48.679Z Vendors: n/a Products: LibVNC Problem Types: Heap Use-After-Free Description: LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-026-libvnc-heap-use-after-free/ - https://www.debian.org/security/2019/dsa-4383 - https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html - https://usn.ubuntu.com/3877-1/
rity/2019/dsa-4383 - https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html - https://usn.ubuntu.com/3877-1/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
CVE ID: CVE-2018-6308 State: PUBLISHED Published: 2018-01-25T08:00:00 Last Updated: 2024-08-05T06:01:48.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\utils.php, the default_currency_name parameter to modules\Configurator\controller.php and modules\Currencies\Currency.php, the duplicate parameter to modules\Contacts\ShowDuplicates.php, the mergecur parameter to modules\Currencies\index.php and modules\Opportunities\Opportunity.php, and the load_signed_id parameter to modules\Documents\Document.php. Additional Analyst Note
portunities\Opportunity.php, and the load_signed_id parameter to modules\Documents\Document.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.defensecode.com/advisories/DC-2018-01-011_SugarCRM_Community_Edition_Advisory.pdf
CVE ID: CVE-2018-6311 State: PUBLISHED Published: 2018-03-10T22:00:00 Last Updated: 2024-08-05T06:01:48.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/DrmnSamoLiu/cd1d6fa59501f161616686296aa4a6c8
CVE ID: CVE-2018-6312 State: PUBLISHED Published: 2018-03-10T22:00:00 Last Updated: 2024-08-05T06:01:48.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system compromise and disclosure of user communications. The foxconn account with an 8-character lowercase alphabetic password can be used. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/DrmnSamoLiu/cd1d6
can be used. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/DrmnSamoLiu/cd1d6fa59501f161616686296aa4a6c8
CVE ID: CVE-2018-6313 State: PUBLISHED Published: 2018-01-25T22:00:00Z Last Updated: 2024-09-16T20:48:13.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/wbce_cms_xss.md
CVE ID: CVE-2018-6315 State: PUBLISHED Published: 2018-01-25T22:00:00 Last Updated: 2024-08-05T06:01:48.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102828 - https://lists.debian.org/debian-lts-announce/2018/03/msg00008.html - https://github.com/libming/libming/issues/101 - https://security.gentoo.org/glsa/201904-24