Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19287 State: PUBLISHED Published: 2018-11-15T05:00:00 Last Updated: 2024-08-05T11:30:04.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the includes/Admin/Menus/Submissions.php (aka submissions page) begin_date, end_date, or form_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1974335/ninja-forms/trunk/includes/Admin/Menus/Submissions.php - https://wordpress.org/plugins/ninja-forms/#developers - https://www.exploit-db.com/exploits/45880/
CVE ID: CVE-2018-19288 State: PUBLISHED Published: 2018-11-15T06:00:00 Last Updated: 2024-08-05T11:30:04.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me.html - http://www.securityfocus.com/bid/105960
CVE ID: CVE-2018-19289 State: PUBLISHED Published: 2018-11-15T06:00:00 Last Updated: 2024-08-05T11:30:04.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xCss/Valine/issues/127
CVE ID: CVE-2018-19290 State: PUBLISHED Published: 2018-11-30T18:00:00 Last Updated: 2024-08-05T11:30:04.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: In modules/HELPBOT_MODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command, resulting in a denial of service or possibly unspecified other impact, as demonstrated by the "!calc 5 x 5" command. In versions before 3.0, modules/HELPBOT_MODULE/calc.php has the vulnerable code; in 3.0 and above, modules/HELPBOT_MODULE/HelpbotController.class.php has the vulnerable code. Additional Analyst Notes: - CVE Program Container: Ref
LPBOT_MODULE/HelpbotController.class.php has the vulnerable code. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Nov/44 - http://packetstormsecurity.com/files/150391/Budabot-4.0-Denial-Of-Service.html
CVE ID: CVE-2018-19291 State: PUBLISHED Published: 2018-11-15T06:00:00 Last Updated: 2024-08-05T11:30:04.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chekun/DiliCMS/issues/60
CVE ID: CVE-2018-19295 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:30:04.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sylabs/singularity/releases/tag/2.6.1
CVE ID: CVE-2018-19296 State: PUBLISHED Published: 2018-11-16T09:00:00 Last Updated: 2024-08-05T11:30:04.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.27 - https://lists.debian.org/debian-lts-announce/2018/12/msg00020.html - https://www.debian.org/security/2018/dsa-4351 - https://github.com/PHPMailer/PHPMailer/releases/tag/v6.0.6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/ - htt
doraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/
CVE ID: CVE-2018-19300 State: PUBLISHED Published: 2019-04-11T15:22:44 Last Updated: 2024-08-05T11:30:04.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted h
version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well. Additional Analyst Notes: - CVE Program Container: References: - https://www.greenbone.net/schwerwiegende-sicherheitsluecke-in-d-link-routern-entdeckt/ - https://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers/1772 - https://eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers - h
nk.com/de/de/support/support-news/2019/march/19/remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers - https://www.greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers/
CVE ID: CVE-2018-19301 State: PUBLISHED Published: 2018-11-15T23:00:00 Last Updated: 2024-08-05T11:30:04.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/S-LBK/teleport/blob/master/Attack%20step.docx
CVE ID: CVE-2018-19311 State: PUBLISHED Published: 2018-11-16T19:00:00 Last Updated: 2024-08-05T11:30:04.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details > Services" screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.roothc.com.br/1349-2/ - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html - https://github.com/centreon/centreon/pull/6632
CVE ID: CVE-2018-19312 State: PUBLISHED Published: 2018-11-16T19:00:00 Last Updated: 2024-08-05T11:30:04.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/centreon/centreon/pull/6257 - http://www.roothc.com.br/1349-2/ - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.24.html - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html - https://github.co
ocumentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html - https://github.com/centreon/centreon/pull/6628
CVE ID: CVE-2018-19318 State: PUBLISHED Published: 2018-11-16T19:00:00Z Last Updated: 2024-09-17T03:02:16.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/martinzhou2015/SRCMS-dev/issues/1
CVE ID: CVE-2018-19319 State: PUBLISHED Published: 2018-11-16T19:00:00Z Last Updated: 2024-09-16T17:14:38.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/martinzhou2015/SRCMS-dev/issues/1
CVE ID: CVE-2018-19320 State: PUBLISHED Published: 2018-12-21T23:00:00.000Z Last Updated: 2025-10-21T23:45:45.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2018/Dec/39 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities - http:
re/2018/Dec/39 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities - http://www.securityfocus.com/bid/106252 - https://www.gigabyte.com/tw/Support/Utility/Graphics-Card - https://www.gigabyte.com/Support/Security/1801
CVE ID: CVE-2018-19321 State: PUBLISHED Published: 2018-12-21T23:00:00.000Z Last Updated: 2025-10-21T23:45:45.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2018/Dec/39 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-
clists.org/fulldisclosure/2018/Dec/39 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities - http://www.securityfocus.com/bid/106252 - https://www.gigabyte.com/Support/Security/1801
CVE ID: CVE-2018-19322 State: PUBLISHED Published: 2018-12-21T23:00:00.000Z Last Updated: 2025-10-21T23:45:45.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2018/Dec/39 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-el
ences: - http://seclists.org/fulldisclosure/2018/Dec/39 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities - http://www.securityfocus.com/bid/106252 - https://www.gigabyte.com/tw/Support/Utility/Graphics-Card - https://www.gigabyte.com/Support/Security/1801
CVE ID: CVE-2018-19323 State: PUBLISHED Published: 2018-12-21T23:00:00.000Z Last Updated: 2025-10-21T23:45:44.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2018/Dec/39 - https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities - http://www.securityfocus.com/bid/106252 - https://www
/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities - http://www.securityfocus.com/bid/106252 - https://www.gigabyte.com/tw/Support/Utility/Graphics-Card - https://www.gigabyte.com/Support/Security/1801
CVE ID: CVE-2018-19324 State: PUBLISHED Published: 2018-11-17T13:00:00Z Last Updated: 2024-09-16T17:54:24.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/laolisafe/Kimsq/blob/master/README.md
CVE ID: CVE-2018-19325 State: REJECTED Published: 2020-03-16T18:09:44 Last Updated: 2020-03-30T12:20:40 Description: No description available.
CVE ID: CVE-2018-19326 State: PUBLISHED Published: 2018-11-17T14:00:00Z Last Updated: 2024-09-16T16:13:05.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/numanturle/4988b5583e5ebe501059bd368636de33
CVE ID: CVE-2018-19327 State: PUBLISHED Published: 2018-11-17T15:00:00 Last Updated: 2024-08-05T11:30:04.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JTBC(PHP) 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/toiron/setest/blob/master/jtbcpublisharticle.html
CVE ID: CVE-2018-19328 State: PUBLISHED Published: 2018-11-17T15:00:00 Last Updated: 2024-08-05T11:30:04.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/onkyoworm/poc/blob/master/laobancms/poc.md
CVE ID: CVE-2018-19329 State: PUBLISHED Published: 2018-11-17T15:00:00 Last Updated: 2024-08-05T11:30:04.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GreenCMS/GreenCMS/issues/113
CVE ID: CVE-2018-19331 State: PUBLISHED Published: 2018-11-17T15:00:00 Last Updated: 2024-08-05T11:30:04.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmssql-injection.html
CVE ID: CVE-2018-19332 State: PUBLISHED Published: 2018-11-17T15:00:00 Last Updated: 2024-08-05T11:37:10.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI. Additional Analyst Notes: - CVE Program Container: References: - https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmscsrf.html
CVE ID: CVE-2018-19333 State: PUBLISHED Published: 2018-11-17T17:00:00 Last Updated: 2024-08-05T11:37:10.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite memory locations in processes running as root (but not escape the sandbox) via vectors involving IPC_RMID shmctl calls, because reference counting is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://justi.cz/security/2018/11/14/gvisor-lpe.html - https://github.com/google/gvisor/commit/0e277a39c8b6f905e289b75e8ad0594e6b3562ca
CVE ID: CVE-2018-19334 State: PUBLISHED Published: 2018-11-20T09:00:00 Last Updated: 2024-08-05T11:37:09.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Monorail before 2018-05-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download times (for requests with an unsupported axis) can be used to obtain sensitive information about the content of bug reports. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/netsec/comments/9yiidf/xssearching_googles_bug_tracker_to_find_out/ea2i7wz/ - https://chromium.googlesource.com/infra/infra/+/77ef00cb53d90c9d1f984eca434d828de5
es_bug_tracker_to_find_out/ea2i7wz/ - https://chromium.googlesource.com/infra/infra/+/77ef00cb53d90c9d1f984eca434d828de5c167a5 - https://medium.com/%40luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549
CVE ID: CVE-2018-19335 State: PUBLISHED Published: 2018-11-20T09:00:00 Last Updated: 2024-08-05T11:37:11.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download times (for requests with a crafted groupby value) can be used to obtain sensitive information about the content of bug reports. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/netsec/comments/9yiidf/xssearching_googles_bug_tracker_to_find_out/ea2i7wz/ - https://medium.com/%40luanherrera/xs-searching-googles-bug-tracker-to-find-out
oogles_bug_tracker_to_find_out/ea2i7wz/ - https://medium.com/%40luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549 - https://chromium.googlesource.com/infra/infra/+/e27936ef82d33a5f286e1f2f22817aa682f79e90
CVE ID: CVE-2018-19340 State: PUBLISHED Published: 2018-11-17T17:00:00 Last Updated: 2024-08-05T11:37:10.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName, ShipAddress, ShipCity, ShipPostalCode, ShipCountry, Freight, or details parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xUhaw/CVE-Bins/tree/master/Guriddo%20Form%20PHP
CVE ID: CVE-2018-19341 State: PUBLISHED Published: 2018-11-17T21:00:00Z Last Updated: 2024-09-16T23:55:51.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!std::basic_ostream >::operator<<+0x0000000000087906" issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https:/
erences: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/
CVE ID: CVE-2018-19342 State: PUBLISHED Published: 2018-11-17T21:00:00Z Last Updated: 2024-09-16T16:42:46.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation starting at U3DBrowser+0x000000000000347a" issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://github.com/Yan-1-20/Yan-1-20.github.io/tree
-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://github.com/Yan-1-20/Yan-1-20.github.io/tree/master/2018/11/08/2018/11/2018-11-08-2/index.html - https://yan-1-20.github.io/2018/11/08/2018/11/2018-11-08-2/ - https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/
CVE ID: CVE-2018-19343 State: PUBLISHED Published: 2018-11-17T21:00:00Z Last Updated: 2024-09-17T02:32:44.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read), obtain sensitive information, or possibly have unspecified other impact via a U3D sample because of a "Data from Faulting Address controls Code Flow starting at U3DBrowser!PlugInMain+0x00000000000f43ff" issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11
es: - CVE Program Container: References: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/
CVE ID: CVE-2018-19344 State: PUBLISHED Published: 2018-11-17T21:00:00Z Last Updated: 2024-09-17T03:22:38.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address may be used as a return value starting at U3DBrowser!PlugInMain+0x0000000000031a75" issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https
eferences: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/
CVE ID: CVE-2018-19345 State: PUBLISHED Published: 2018-11-17T21:00:00Z Last Updated: 2024-09-17T02:31:27.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at U3DBrowser!PlugInMain+0x0000000000053f8b" issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://yan-1-20.github.io/201
ub.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/
CVE ID: CVE-2018-19346 State: PUBLISHED Published: 2018-11-17T21:00:00Z Last Updated: 2024-09-16T23:47:02.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x00000000000d11ea" issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://y
ences: - https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html - https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/