Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10352 State: PUBLISHED Published: 2018-05-23T16:00:00 Last Updated: 2024-08-05T07:39:07.136Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: SQL Injection Description: A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formConfiguration class. Authentication is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1119349 - https://www.zerodayinitiative.com/advisories/ZDI-18-418/
CVE ID: CVE-2018-10353 State: PUBLISHED Published: 2018-05-23T16:00:00 Last Updated: 2024-08-05T07:39:07.378Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: SQL Injection Description: A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable installations due to a flaw in the formChangePass class. Authentication is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1119349 - https://www.zerodayinitiative.com/advisories/ZDI-18-419/
CVE ID: CVE-2018-10354 State: PUBLISHED Published: 2018-05-23T16:00:00 Last Updated: 2024-08-05T07:39:07.654Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: Command Injection RCE Description: A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the LauncherServer. Authentication is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-416/ - https://success.trendmicro.com/solution/1119349
CVE ID: CVE-2018-10355 State: PUBLISHED Published: 2018-05-23T16:00:00 Last Updated: 2024-08-05T07:39:07.392Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: Authentication Weakness Description: An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-411/ - https://success.trendmicro.
Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-411/ - https://success.trendmicro.com/solution/1119349
CVE ID: CVE-2018-10356 State: PUBLISHED Published: 2018-05-23T16:00:00 Last Updated: 2024-08-05T07:39:07.728Z Vendors: Trend Micro Products: Trend Micro Email Encryption Gateway Problem Types: SQL Injection Description: A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRequestDomains class. Authentication is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-420/ - https://success.trendmicro.com/solution/1119349
CVE ID: CVE-2018-10357 State: PUBLISHED Published: 2018-05-23T16:00:00 Last Updated: 2024-08-05T07:39:06.874Z Vendors: Trend Micro Products: Trend Micro Endpoint Application Control Problem Types: Directory Traversal Description: A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-469/ - http://www.securityfocus.com/bid/104355 - https://success.trendmicro.com/solution
nitiative.com/advisories/ZDI-18-469/ - http://www.securityfocus.com/bid/104355 - https://success.trendmicro.com/solution/1119811
CVE ID: CVE-2018-10358 State: PUBLISHED Published: 2018-06-08T14:00:00 Last Updated: 2024-08-05T07:39:07.401Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Pool Corruption Privilege Escalation Description: A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x2200B4 in the TMWFP driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendm
r to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1119961 - https://www.zerodayinitiative.com/advisories/ZDI-18-565/
CVE ID: CVE-2018-10359 State: PUBLISHED Published: 2018-06-08T14:00:00 Last Updated: 2024-08-05T07:39:08.076Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Pool Corruption Privilege Escalation Description: A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x220078 in the TMWFP driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendm
r to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1119961 - https://www.zerodayinitiative.com/advisories/ZDI-18-564/
CVE ID: CVE-2018-10360 State: PUBLISHED Published: 2018-06-11T10:00:00 Last Updated: 2024-08-05T07:39:07.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3686-1/ - https://github.com/file/file/commit/a642587a9c9e2dd7feacdf513c3643ce26ad3c22 - https://usn.ubuntu.com/3686-2/ - https://security.gentoo.org/glsa/201806-08 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html - http://lists.
y.gentoo.org/glsa/201806-08 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html
CVE ID: CVE-2018-10361 State: PUBLISHED Published: 2018-04-25T05:00:00 Last Updated: 2024-08-05T07:39:06.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as utilized in the Kate text editor) can allow other unprivileged users on the local system to gain root privileges. The attack occurs when one user (who has an unprivileged account but is also able to authenticate as root) writes a text file using Kate into a directory owned by a another unprivileged user. The latter unprivileged user conducts a symlink attack to achieve pr
o a directory owned by a another unprivileged user. The latter unprivileged user conducts a symlink attack to achieve privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/04/24/1 - https://bugzilla.suse.com/show_bug.cgi?id=1033055 - http://www.openwall.com/lists/oss-security/2019/07/09/3
CVE ID: CVE-2018-10362 State: PUBLISHED Published: 2018-04-25T05:00:00 Last Updated: 2024-08-05T07:39:07.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with '==' instead of '===' in classes/Authorization.php for the user-provided login password, it is possible to login with a simpler password if the password has the form of a power in scientific notation (like '2e2' for '200' or '0e1234' for '0'). This is possible because, in the loose comparison case, PHP interprets the string as a number in scientific notation, and thus converts it to a number. After that, the comparison with '==' casts
string as a number in scientific notation, and thus converts it to a number. After that, the comparison with '==' casts the user input (e.g., the string '200' or '0') to a number, too. Hence the attacker can login with just a '0' or a simple number he has to brute force. Strong comparison with '===' prevents the cast into numbers. Additional Analyst Notes: - CVE Program Container: References: - http://k3research.outerhaven.de/posts/small-mistakes-lead-to-big-problems.html - https://github.com/phpLiteAdmin/pla/issues/11
CVE ID: CVE-2018-10363 State: PUBLISHED Published: 2018-06-13T18:00:00 Last Updated: 2024-08-05T07:39:07.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/B0UG/68d3161af0c0ec85c615ca7452f9755e
CVE ID: CVE-2018-10364 State: PUBLISHED Published: 2018-04-30T21:00:00 Last Updated: 2024-08-05T07:39:07.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigTree before 4.2.22 has XSS in the Users management page via the name or company field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/332 - https://github.com/bigtreecms/BigTree-CMS/commit/b2eff67e45b90ca26a62e971e8f0d5d0d70f23e6 - https://github.com/bigtreecms/BigTree-CMS#changelog
CVE ID: CVE-2018-10365 State: PUBLISHED Published: 2018-05-01T16:00:00 Last Updated: 2024-08-05T07:39:07.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in the Threads to Link plugin 1.3 for MyBB. When editing a thread, the user is given the option to convert the thread to a link. The thread link input box is not properly sanitized. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44547/
CVE ID: CVE-2018-10366 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:07.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44546/ - https://github.com/rainlab/user-plugin/commit/098c2bc907443d67e9e18645f850e3de42941d20
CVE ID: CVE-2018-10367 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:07.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/135
CVE ID: CVE-2018-10368 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:07.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module -> System Announcement" feature has Stored XSS via an announcement. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/136
CVE ID: CVE-2018-10369 State: PUBLISHED Published: 2018-08-15T17:00:00 Last Updated: 2024-08-05T07:39:07.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40julianpedrobraga/router-hacking-destrinchando-o-elo-mais-fraco-de-uma-rede-4d0e7fcfbd9e
CVE ID: CVE-2018-10371 State: PUBLISHED Published: 2018-05-01T13:00:00 Last Updated: 2024-08-05T07:39:07.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress. A persistent cross-site scripting vulnerability has been identified in the web interface of the plugin that allows the execution of arbitrary HTML/script code to be executed in a victim's web browser via a page title. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9080 - https://wordpress.org/plugins/wf-cookie-consent/#developers - https://www.exploit-db.com/exploits/44585/ - https://g
0 - https://wordpress.org/plugins/wf-cookie-consent/#developers - https://www.exploit-db.com/exploits/44585/ - https://gist.github.com/B0UG/8615df3fe83a4deca07334af783696d6
CVE ID: CVE-2018-10372 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:07.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103976 - https://access.redhat.com/errata/RHSA-2018:3032 - https://sourceware.org/bugzilla/show_bug.cgi?id=23064 - https://access.redhat.com/errata/RHBA-2019:0327 - https://security.gentoo.org/glsa/201908-01 - https://usn
gi?id=23064 - https://access.redhat.com/errata/RHBA-2019:0327 - https://security.gentoo.org/glsa/201908-01 - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-10373 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:07.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23065 - https://access.redhat.com/errata/RHSA-2018:3032 - http://www.securityfocus.com/bid/104000 - https://access.redhat.com/errata/RHBA-2
ess.redhat.com/errata/RHSA-2018:3032 - http://www.securityfocus.com/bid/104000 - https://access.redhat.com/errata/RHBA-2019:0327 - https://security.gentoo.org/glsa/201908-01 - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-10374 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:07.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: EasyCMS 1.3 has XSS via the s POST parameter (aka a search box value) in an index.php?s=/index/search/index.html request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/teameasy/EasyCMS/issues/1
CVE ID: CVE-2018-10375 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:07.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2, which can be utilized by attackers to upload and execute arbitrary PHP code via the /dede/archives_do.php?dopost=uploadLitpic litpic parameter when "Content-Type: image/jpeg" is sent, but the filename ends in .php and contains PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ky-j/dedecms/issues/1
CVE ID: CVE-2018-10376 State: PUBLISHED Published: 2018-04-25T09:00:00 Last Updated: 2024-08-05T07:39:07.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh (aka SMT), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted _fee and _value parameters, as exploited in the wild in April 2018, aka the "proxyOverflow" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/04/25/proxyOverflow/ - https://www.reddit.com/r/ethereum/comments/8esyg9/okex_erc20_bug/ - https://dasp.co/#item-3
CVE ID: CVE-2018-10377 State: PUBLISHED Published: 2018-06-17T16:00:00 Last Updated: 2024-08-05T07:39:07.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data. Additional Analyst Notes: - CVE Program Container: References: - http://releases.portswigger.net/2018/06/1734.html - https://hackerone.com/reports/337680 - https://integritylabs.io/advisories/cve-2018-10377
CVE ID: CVE-2018-10379 State: PUBLISHED Published: 2018-05-31T21:00:00 Last Updated: 2024-08-05T07:39:07.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/04/30/security-release-gitlab-10-dot-7-dot-2-released/ - http://www.securityfocus.com/bid/104491
CVE ID: CVE-2018-10380 State: PUBLISHED Published: 2018-05-08T08:00:00 Last Updated: 2024-08-05T07:39:07.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4200 - https://commits.kde.org/kwallet-pam/99abc7fde21f40cc6da5feb6ee766cc46fcca1f8 - https://bugzilla.suse.com/show_bug.cgi?id=1090863 - https://commits.kde.org/kwallet-pam/01d4143fda5bddb6dca37b23304dc239a5fb38b5 - https://commits.kde.org/kwallet-pam/802f305d81f8771c4f4a8bd7fd0e368ffc6f9b3b - https://
5bddb6dca37b23304dc239a5fb38b5 - https://commits.kde.org/kwallet-pam/802f305d81f8771c4f4a8bd7fd0e368ffc6f9b3b - https://commits.kde.org/kwallet-pam/2134dec85ce19d6378d03cddfae9e5e464cb24c0 - https://www.kde.org/info/security/advisory-20180503-1.txt
CVE ID: CVE-2018-10381 State: PUBLISHED Published: 2018-04-26T00:00:00Z Last Updated: 2024-09-16T16:49:13.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: TunnelBear 3.2.0.6 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "TunnelBearMaintenance" service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "OpenVPNConnect" method accepts a server list argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in th
ecify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-022.md
CVE ID: CVE-2018-10382 State: PUBLISHED Published: 2018-06-01T17:00:00 Last Updated: 2024-08-05T07:39:07.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: MODX Revolution 2.6.3 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/modxcms/revolution/pull/13887 - https://github.com/modxcms/revolution/pull/13887/commits/3241473d8213e9551cef4ed0e8ac4645cfbd10c4
CVE ID: CVE-2018-10383 State: PUBLISHED Published: 2019-05-02T19:48:02 Last Updated: 2024-08-05T07:39:08.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the auth.asp login page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grymer/CVE/blob/master/CVE-2018-10383.md
CVE ID: CVE-2018-10387 State: PUBLISHED Published: 2019-12-23T22:45:39 Last Updated: 2024-08-05T07:39:07.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or possibly execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2008-2161. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/tftp-server/discussion/550564/thread/a586ce62/
CVE ID: CVE-2018-10388 State: PUBLISHED Published: 2019-12-23T22:45:43 Last Updated: 2024-08-05T07:39:06.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/tftp-server/discussion/550564/thread/a586ce62/
CVE ID: CVE-2018-10389 State: PUBLISHED Published: 2019-12-23T22:45:46 Last Updated: 2024-08-05T07:39:07.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logMess function in TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/tftp-server/discussion/550564/thread/a586ce62/
CVE ID: CVE-2018-10391 State: PUBLISHED Published: 2018-04-26T05:00:00 Last Updated: 2024-08-05T07:39:07.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email parameter to the index.php?m=member&v=register URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/134
CVE ID: CVE-2018-10392 State: PUBLISHED Published: 2018-04-26T05:00:00 Last Updated: 2024-08-05T07:39:07.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.xiph.org/xiph/vorbis/issues/2335 - https://access.redhat.com/errata/RHSA-2019:3703 - https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html - https://security.gentoo.org/glsa/
/RHSA-2019:3703 - https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html - https://security.gentoo.org/glsa/202003-36 - https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
CVE ID: CVE-2018-10393 State: PUBLISHED Published: 2018-04-26T05:00:00 Last Updated: 2024-08-05T07:39:07.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.xiph.org/xiph/vorbis/issues/2334 - https://access.redhat.com/errata/RHSA-2019:3703 - https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html - https://security.gentoo.org/glsa/202003-36 - https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html