Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
WavPack/commit/070ef6f138956d9ea9612e69586152339dbefe51 - https://usn.ubuntu.com/3839-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZGXJUHCGQI6XKLCBUZHXPYIIWMFWA22/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BLSOEVEKF4VNNVNZ2AN46BJUT4TGVWT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVVKOBJR5APOB3KWUWJ4UWQHUBZQL6C6/ - https://seclists.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.ht
sts.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/ - https://security.gentoo.org/glsa/202007-19 - https://lists.debian.org/debian-lts-announce/2021/01/msg00013.html
CVE ID: CVE-2018-19841 State: PUBLISHED Published: 2018-12-04T09:00:00 Last Updated: 2024-08-05T11:44:20.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dbry/WavPack/issues/54 - https://github.com/dbry/WavPack/commit/bba5389dc598a92bdf2b297c3ea34620b6679b5b - https://usn.ubuntu.com/3839-1/ - http://lists.opensuse.org/opensuse-security-announc
dc598a92bdf2b297c3ea34620b6679b5b - https://usn.ubuntu.com/3839-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZGXJUHCGQI6XKLCBUZHXPYIIWMFWA22/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BLSOEVEKF4VNNVNZ2AN46BJUT4TGVWT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVVKOBJR5APOB3KWUWJ4UWQHUBZQL6C6/ - https://seclists.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html - https://lists.fed
ec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/ - https://security.gentoo.org/glsa/202007-19 - https://lists.debian.org/debian-lts-announce/2021/01/msg00013.html
CVE ID: CVE-2018-19842 State: PUBLISHED Published: 2018-12-04T09:00:00 Last Updated: 2024-08-05T11:44:20.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/12239 - https://github.com/radare/radare2/commit/66191f780863ea8c66ace4040d0d04a8842e8432
CVE ID: CVE-2018-19843 State: PUBLISHED Published: 2018-12-04T09:00:00 Last Updated: 2024-08-05T11:44:20.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/12242 - https://github.com/radare/radare2/commit/f17bfd9f1da05f30f23a4dd05e9d2363e1406948
CVE ID: CVE-2018-19844 State: PUBLISHED Published: 2018-12-31T15:00:00 Last Updated: 2024-08-05T11:44:20.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19844/blob/master/frog_CMS.pdf
CVE ID: CVE-2018-19845 State: PUBLISHED Published: 2018-12-31T15:00:00 Last Updated: 2024-08-05T11:44:20.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19845/blob/master/XSS.pdf
CVE ID: CVE-2018-19849 State: PUBLISHED Published: 2018-12-04T09:00:00 Last Updated: 2024-08-05T11:44:20.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/8
CVE ID: CVE-2018-19853 State: PUBLISHED Published: 2018-12-04T09:00:00 Last Updated: 2024-08-05T11:44:20.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability (that allows control over the whole web site) via the admin.php/user/add URI because a storekeeper account (which is supposed to have only privileges for commodity management) can add an administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liu946/hitshop/issues/1
CVE ID: CVE-2018-19854 State: PUBLISHED Published: 2018-12-04T16:00:00 Last Updated: 2024-08-05T11:44:20.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker does not need a capability (however, the system must have the CONFIG_CRYPTO_USER kconfig option). Additional Analyst Notes: - CVE Program Container: Referenc
the system must have the CONFIG_CRYPTO_USER kconfig option). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/f43f39958beb206b53292801e216d9b8a660f087 - https://usn.ubuntu.com/3872-1/ - https://usn.ubuntu.com/3901-2/ - https://usn.ubuntu.com/3878-1/ - https://usn.ubuntu.com/3878-2/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f43f39958beb206b53292801e216d9b8a660f087 - https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.3 - https://usn.ubuntu.com/3901-1/ - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517
CVE ID: CVE-2018-19855 State: PUBLISHED Published: 2019-08-08T12:56:14 Last Updated: 2024-08-05T11:44:20.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features. Additional Analyst Notes: - CVE Program Container: References: - https://www.uipath.com/product/release-notes - https://www2.deloitte.com/de/de/pages/risk/articles/uipath-orchestrator-csv-injection.html
CVE ID: CVE-2018-19856 State: PUBLISHED Published: 2019-03-26T15:50:42 Last Updated: 2024-08-05T11:44:20.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/12/06/critical-security-release-gitlab-11-dot-5-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54857
CVE ID: CVE-2018-19857 State: PUBLISHED Published: 2018-12-05T11:00:00 Last Updated: 2024-08-05T11:44:20.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106130 - https://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=0cc5ea748ee5ff7705dde61ab15dff8f5
/www.securityfocus.com/bid/106130 - https://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=0cc5ea748ee5ff7705dde61ab15dff8f58be39d0 - https://dyntopia.com/advisories/013-vlc - https://www.debian.org/security/2019/dsa-4366 - https://usn.ubuntu.com/4074-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html
CVE ID: CVE-2018-19858 State: PUBLISHED Published: 2019-01-29T23:00:00 Last Updated: 2024-08-05T11:44:20.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrinceXML, versions 10 and below, is vulnerable to XXE due to the lack of protection against external entities. If an attacker passes HTML referencing an XML file (e.g., in an IFRAME element), PrinceXML will fetch the XML and parse it, thus giving an attacker file-read access and full-fledged SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.lynxsecurity.io/ - https://hacking.us.com/blog/XSS-to-XXE-in-Prince/ - https://www.youtube.com/watch?v=-7YIzYtWhzM
CVE ID: CVE-2018-19859 State: PUBLISHED Published: 2018-12-05T11:00:00 Last Updated: 2024-08-05T11:44:20.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenRefine/OpenRefine/issues/1840 - https://github.com/OpenRefine/OpenRefine/pull/1901
CVE ID: CVE-2018-19860 State: PUBLISHED Published: 2019-06-07T16:23:26 Last Updated: 2024-08-05T11:44:20.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/resources/product-security-center - https://source.android.com/security/bulletin/2019-05-01 - https://support.apple.com/kb/HT210348 - http://sec
ty-center - https://source.android.com/security/bulletin/2019-05-01 - https://support.apple.com/kb/HT210348 - http://seclists.org/fulldisclosure/2019/Jul/22 - https://seclists.org/bugtraq/2019/Aug/21 - http://seclists.org/fulldisclosure/2019/Aug/11
CVE ID: CVE-2018-19861 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:44:20.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150689/MiniShare-1.4.1-HEAD-POST-Buffer-Overflow.html - https://www.exploit-db.com/exploits/45999/ - http://seclists.org/fulldisclosure/2018/Dec/19
CVE ID: CVE-2018-19862 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:44:20.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request. NOTE: this product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150689/MiniShare-1.4.1-HEAD-POST-Buffer-Overflow.html - https://www.exploit-db.com/exploits/45999/ - http://seclists.org/fulldisclosure/2018/Dec/19
CVE ID: CVE-2018-19863 State: PUBLISHED Published: 2018-12-22T15:00:00 Last Updated: 2024-08-05T11:44:20.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 1Password 7.2.3.BETA before 7.2.3.BETA-3 on macOS. A mistake in error logging resulted in instances where sensitive data passed from Safari to 1Password could be logged locally on the user's machine. This data could include usernames and passwords that a user manually entered into Safari. Additional Analyst Notes: - CVE Program Container: References: - https://discussions.agilebits.com/discussion/99429/the-security-content-of=-betas-7-2-3-beta-3-and-7-2-3-beta-4/p1?new=3D1 - https://app-updates.agil
.com/discussion/99429/the-security-content-of=-betas-7-2-3-beta-3-and-7-2-3-beta-4/p1?new=3D1 - https://app-updates.agilebits.com/product_history/OPM7#v70203009 - https://support.1password.com/kb/201812/
CVE ID: CVE-2018-19864 State: PUBLISHED Published: 2018-12-05T11:00:00 Last Updated: 2024-08-05T11:44:20.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.digitaldefense.com/blog/zero-day-alerts/nuuo-firmware-disclosure/ - https://www.nuuo.com/DownloadMainpage.php - http://packetstormsecurity.com/files/153162/NUUO-NVRMini-2-3.9.1-Stack-Overflow.html
CVE ID: CVE-2018-19865 State: PUBLISHED Published: 2018-12-05T11:00:00 Last Updated: 2024-08-05T11:44:20.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.qt-project.org/#/c/245283/ - https://codereview.qt-project.org/#/c/243666/ - https://codereview.qt-project.org/#/c/245638/ - https://codereview.qt-project.org/#/c/244569/ - https://codereview.qt-project.org/#/c/245312/ - https://codereview.qt-project.org/#/c/246630/ - https://codereview.qt-project.org/#/c/245293/ - https://
g/#/c/245312/ - https://codereview.qt-project.org/#/c/246630/ - https://codereview.qt-project.org/#/c/245293/ - https://codereview.qt-project.org/#/c/244687/ - https://codereview.qt-project.org/#/c/245640/ - https://codereview.qt-project.org/#/c/244845/ - http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00085.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00086.html
CVE ID: CVE-2018-19869 State: PUBLISHED Published: 2018-12-26T20:00:00 Last Updated: 2024-08-05T11:44:20.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.qt-project.org/#/c/234142/ - https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00008.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html - https://access.redhat.com/errata/RHSA-2019:2135 - http://lists.opensuse.o
rg/debian-lts-announce/2019/05/msg00014.html - https://access.redhat.com/errata/RHSA-2019:2135 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00090.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00035.html
CVE ID: CVE-2018-19870 State: PUBLISHED Published: 2018-12-26T20:00:00 Last Updated: 2024-08-05T11:44:20.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.qt-project.org/#/c/235998/ - https://www.debian.org/security/2019/dsa-4374 - https://lists.debian.org/debian-lts-announce/2019/01/msg00004.html - https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00
2/04/qt-5-11-3-released-important-security-updates/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html - https://usn.ubuntu.com/4003-1/ - https://access.redhat.com/errata/RHSA-2019:2135 - https://access.redhat.com/errata/RHSA-2019:3390 - https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
CVE ID: CVE-2018-19871 State: PUBLISHED Published: 2018-12-26T20:00:00 Last Updated: 2024-08-05T11:44:20.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.qt-project.org/#/c/237761/ - https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00002.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html - https://access.redhat.com/errata/RHSA-2019:2135 - https://lists.debian.org/debian-lts-anno
ounce/2019/05/msg00014.html - https://access.redhat.com/errata/RHSA-2019:2135 - https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
CVE ID: CVE-2018-19872 State: PUBLISHED Published: 2019-03-15T22:00:00 Last Updated: 2024-08-05T11:44:20.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://bugreports.qt.io/browse/QTBUG-69449 - http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XS6G3ZDFCHWFQD4CFXWFPHREOHBBDTD7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org
3ZDFCHWFQD4CFXWFPHREOHBBDTD7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FO7IBY7YYKNMRD5OI3JNNUI42WEM7NUV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C5FHCR4A636BLTAXL76WWDJLOAHGNYG/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html - https://usn.ubuntu.com/4275-1/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00024.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
CVE ID: CVE-2018-19873 State: PUBLISHED Published: 2018-12-26T20:00:00 Last Updated: 2024-08-05T11:44:20.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4374 - http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00004.html - https://codereview.qt-project.org/#/c/238749/ - https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - https://lists.debian.org/debian-lts-announce/20
g.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html - https://usn.ubuntu.com/4003-1/ - https://access.redhat.com/errata/RHSA-2019:2135 - https://access.redhat.com/errata/RHSA-2019:3390 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00090.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
CVE ID: CVE-2018-19876 State: PUBLISHED Published: 2018-12-05T20:00:00Z Last Updated: 2024-09-16T19:46:01.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.webkit.org/show_bug.cgi?id=191595 - https://gitlab.freedesktop.org/cairo/cairo/merge_requests/5
CVE ID: CVE-2018-19877 State: PUBLISHED Published: 2018-12-05T21:00:00 Last Updated: 2024-08-05T11:44:20.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field. Additional Analyst Notes: - CVE Program Container: References: - https://loganalyzer.adiscon.com/news/loganalyzer-v4-1-7-v4-stable-released/ - https://www.exploit-db.com/exploits/45958/
CVE ID: CVE-2018-19878 State: PUBLISHED Published: 2019-06-19T15:21:22 Last Updated: 2024-08-05T11:44:20.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request, the application saves a session. A user can re-login without logging out, causing the application to store the session in memory. Exploitation of this vulnerability will increase memory use and consume free space. Additional Analyst Notes: - CVE Program Container: References: - https://www.triadsec.com/CVE-2018-19878.pdf - https://www.triadsec.com/
CVE ID: CVE-2018-19879 State: PUBLISHED Published: 2019-03-28T16:48:34 Last Updated: 2024-08-05T11:44:20.805Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AC:L/AV:A/A:L/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication functionality is not protected from automated tools used to make login attempts to the application. An anonymous attacker has the ability to make unlimited login attempts with an automated tool. This ability could lead to cracking a targeted user's password. Additional Analyst Notes: - CVE Program Container: References: - h
ty could lead to cracking a targeted user's password. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.teltonika.lt/index.php?title=RUT9xx_Firmware - https://www.triadsec.com/CVE-2018-19879.pdf