Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hat.com/errata/RHSA-2018:2607 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10926 - https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html - https://access.redhat.com/errata/RHSA-2018:2608 - https://access.redhat.com/errata/RHSA-2018:3470 - https://security.gentoo.org/glsa/201904-06 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html
CVE ID: CVE-2018-10927 State: PUBLISHED Published: 2018-09-04T15:00:00 Last Updated: 2024-08-05T07:54:36.074Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: Red Hat Products: glusterfs Problem Types: CWE-20 Description: A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2607 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10927 - https://lists.debian.org/debian-lts-announce/2018/09/msg00
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10927 - https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html - https://access.redhat.com/errata/RHSA-2018:2608 - https://access.redhat.com/errata/RHSA-2018:3470 - https://security.gentoo.org/glsa/201904-06 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html
CVE ID: CVE-2018-10928 State: PUBLISHED Published: 2018-09-04T15:00:00 Last Updated: 2024-08-05T07:54:36.029Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: glusterfs Problem Types: CWE-59 Description: A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10928
itional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10928 - https://access.redhat.com/errata/RHSA-2018:2607 - https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html - https://access.redhat.com/errata/RHSA-2018:2608 - https://access.redhat.com/errata/RHSA-2018:3470 - https://security.gentoo.org/glsa/201904-06 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html
CVE ID: CVE-2018-10929 State: PUBLISHED Published: 2018-09-04T16:00:00 Last Updated: 2024-08-05T07:54:35.297Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: glusterfs Problem Types: CWE-20 Description: A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this flaw to create arbitrary files and execute arbitrary code on glusterfs server nodes. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2607 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10929 - https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html - h
zilla.redhat.com/show_bug.cgi?id=CVE-2018-10929 - https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html - https://access.redhat.com/errata/RHSA-2018:2608 - https://access.redhat.com/errata/RHSA-2018:3470 - http://www.securityfocus.com/bid/107577 - https://security.gentoo.org/glsa/201904-06 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html
CVE ID: CVE-2018-10930 State: PUBLISHED Published: 2018-09-04T16:00:00 Last Updated: 2024-08-05T07:54:35.444Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: glusterfs Problem Types: CWE-20 Description: A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the gluster volume. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10930 - https://access.redhat.com/errata/RHSA-2018:2607 - https://review.gluster.org/#/c/glusterfs/+/21068/ - https://lists.debian.org/debian-lts-announ
m/errata/RHSA-2018:2607 - https://review.gluster.org/#/c/glusterfs/+/21068/ - https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html - https://access.redhat.com/errata/RHSA-2018:2608 - https://access.redhat.com/errata/RHSA-2018:3470 - https://security.gentoo.org/glsa/201904-06 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html
CVE ID: CVE-2018-10931 State: PUBLISHED Published: 2018-08-09T20:00:00 Last Updated: 2024-08-05T07:54:35.798Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: The Cobbler Project Products: cobbler Problem Types: CWE-749 Description: It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10931 - https://access.redhat.com/errata/RHSA-201
er: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10931 - https://access.redhat.com/errata/RHSA-2018:2372 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMWK5KCCZXOGOYNR2H6BWDSABTQ5NYJA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P5Q4ACIVZ5D4KSUDLGRTOKGGB4U42SD/
CVE ID: CVE-2018-10932 State: PUBLISHED Published: 2018-08-21T18:00:00 Last Updated: 2024-08-05T07:54:35.554Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Intel Products: lldptool Problem Types: CWE-117 Description: lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10932 - https://bugzilla.redhat.com/show_bug.cgi?id=1551623 - https://github.com/i
a.redhat.com/show_bug.cgi?id=CVE-2018-10932 - https://bugzilla.redhat.com/show_bug.cgi?id=1551623 - https://github.com/intel/openlldp/pull/7 - https://access.redhat.com/errata/RHSA-2019:3673
CVE ID: CVE-2018-10933 State: PUBLISHED Published: 2018-10-17T12:00:00 Last Updated: 2024-08-05T07:54:35.801Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: [UNKNOWN] Products: libssh Problem Types: CWE-592 Description: A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3795-1/ - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://usn.ubuntu.com/3795-2/ - https://www.debian.o
oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://usn.ubuntu.com/3795-2/ - https://www.debian.org/security/2018/dsa-4322 - https://www.exploit-db.com/exploits/45638/ - https://www.libssh.org/security/advisories/CVE-2018-10933.txt - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933 - http://www.securityfocus.com/bid/105677 - https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016 - https://security.netapp.com/advisory/ntap-20190118-0002/
CVE ID: CVE-2018-10934 State: PUBLISHED Published: 2019-03-27T12:20:07 Last Updated: 2024-08-05T07:54:36.087Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Red Hat Products: wildfly-core Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934 - https://access.redhat.com/errata/RHSA-2019:1160 - https://access.redhat.com/errata/
com/show_bug.cgi?id=CVE-2018-10934 - https://access.redhat.com/errata/RHSA-2019:1160 - https://access.redhat.com/errata/RHSA-2019:1162 - https://access.redhat.com/errata/RHSA-2019:1159 - https://access.redhat.com/errata/RHSA-2019:1161 - https://security.netapp.com/advisory/ntap-20190611-0002/
CVE ID: CVE-2018-10935 State: PUBLISHED Published: 2018-09-11T15:00:00 Last Updated: 2024-08-05T07:54:35.778Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: 389-ds-base Problem Types: CWE-400 Description: A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with server side sort. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2757 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10935 - https://lists.debian.org/debian-lts-announce/2018/08/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2019-
/lists.debian.org/debian-lts-announce/2018/08/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html
CVE ID: CVE-2018-10936 State: PUBLISHED Published: 2018-08-30T13:00:00 Last Updated: 2024-08-05T07:54:36.516Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: PostgreSQL Problem Types: CWE-297 Description: A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This could lead to a condition where a man-in-the-middle attacker could masquerade as a trusted server by providing a certificate for the wrong host, as long as it was signed by a trusted CA. Additional Analyst Notes: - CVE Program Container: References:
the wrong host, as long as it was signed by a trusted CA. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105220 - https://www.postgresql.org/about/news/1883/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10936 - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
CVE ID: CVE-2018-10937 State: PUBLISHED Published: 2018-09-11T16:00:00 Last Updated: 2024-08-05T07:54:36.023Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Openshift Container Platform Problem Types: CWE-79 Description: A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10937 - http://www.securityfocus.com/bid/105190 - https://github.com/openshift/console/pull
com/show_bug.cgi?id=CVE-2018-10937 - http://www.securityfocus.com/bid/105190 - https://github.com/openshift/console/pull/461 - https://github.com/openshift/console/commit/d56666852da6e7309a2e63a49f49a72ff66d309c
CVE ID: CVE-2018-10938 State: PUBLISHED Published: 2018-08-27T13:00:00 Last Updated: 2024-08-05T07:54:35.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2018/q3/1
verage this flaw. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2018/q3/179 - https://usn.ubuntu.com/3797-2/ - https://usn.ubuntu.com/3797-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=40413955ee265a5e42f710940ec78f5450d49149 - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - http://www.securitytracker.com/id/1041569 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10938 - http://www.securityfocus.com/bid/105154 - https://www.debian.org/security/2018/dsa-4308
CVE ID: CVE-2018-10939 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-05T07:54:35.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact group. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.8/P4 - https://blog.zimbra.com/2018/05/new-zimbra-patches-8-8-8-patch-4-and-8-7-11-patch-4/ - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.11/P4 - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE ID: CVE-2018-10940 State: PUBLISHED Published: 2018-05-09T17:00:00 Last Updated: 2024-08-05T07:54:35.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3676-1/ - https://access.redhat.com/errata/RHSA-2018:3083 - https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - https://usn.ubuntu.com/3695-1/ - https://usn.ubuntu.com/3695-2/ - http://git.kernel.org/
nnounce/2018/07/msg00015.html - https://usn.ubuntu.com/3695-1/ - https://usn.ubuntu.com/3695-2/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707 - https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html - https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6 - https://usn.ubuntu.com/3754-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://access.redhat.com/errata/RHSA-2018:2948 - https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707 - https://usn.ubuntu.com/3676-2/ - http://www.sec
hub.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707 - https://usn.ubuntu.com/3676-2/ - http://www.securityfocus.com/bid/104154 - https://access.redhat.com/errata/RHSA-2018:3096
CVE ID: CVE-2018-10942 State: PUBLISHED Published: 2018-05-10T03:00:00 Last Updated: 2024-08-05T07:54:36.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file. Additional Analyst Notes: - CVE Program Container: References: - https://ia-informatica.com/it/CVE-2018-10942
CVE ID: CVE-2018-10943 State: PUBLISHED Published: 2018-07-10T15:00:00 Last Updated: 2024-08-05T07:54:35.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3. Sending an arbitrary unexpected string to TCP port 7100 respecting a certain frequency timing disconnects all clients and results in a crash of the Unit. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=06&patchVersion=00&buildVersion=003 - https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=06&patch
hVersion=00&buildVersion=003 - https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=06&patchVersion=00&buildVersion=003
CVE ID: CVE-2018-10944 State: PUBLISHED Published: 2018-05-14T01:00:00 Last Updated: 2024-08-05T07:54:36.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The request_dividend function of a smart contract implementation for ROC (aka Rasputin Online Coin), an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jonghyk.song/attackers-can-steal-all-of-ether-in-roc-rasputin-online-coin-token-smart-contract-ae928b4a935a
CVE ID: CVE-2018-10945 State: PUBLISHED Published: 2018-06-19T21:00:00 Last Updated: 2024-08-05T07:54:35.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash, or NULL pointer dereference) via an HTTP request, related to the mbuf_insert function. Additional Analyst Notes: - CVE Program Container: References: - http://blog.hac425.top/2018/05/16/CVE-2018-10945-mongoose.html
CVE ID: CVE-2018-10946 State: PUBLISHED Published: 2019-06-13T18:06:21 Last Updated: 2024-08-05T07:54:35.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password via the admin web UI. Additional Analyst Notes: - CVE Program Container: References: - https://support.polycom.com/PolycomService/home/home.htm - https://support.polycom.com/content/dam/polycom-support/global/documentation/advisory-rp-debut-vulnerabilities.pdf
CVE ID: CVE-2018-10947 State: PUBLISHED Published: 2019-06-13T18:08:05 Last Updated: 2024-08-05T07:54:35.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted. Additional Analyst Notes: - CVE Program Container: References: - https://support.polycom.com/PolycomService/home/home.htm - https://support.polycom.com/content/dam/polycom-support/global/documentation/advisory-rp-debut-vulnerabilities.pdf
CVE ID: CVE-2018-10948 State: PUBLISHED Published: 2019-05-30T17:11:12 Last Updated: 2024-08-05T07:54:36.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.zimbra.com/show_bug.cgi?id=107948
CVE ID: CVE-2018-10949 State: PUBLISHED Published: 2018-05-10T01:00:00Z Last Updated: 2024-09-17T04:04:39.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy between the "HTTP 404 - account is not active" and "HTTP 401 - must authenticate" errors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.zimbra.com/show_bug.cgi?id=108962
CVE ID: CVE-2018-10950 State: PUBLISHED Published: 2018-05-10T01:00:00Z Last Updated: 2024-09-17T01:11:38.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.zimbra.com/show_bug.cgi?id=108963
CVE ID: CVE-2018-10951 State: PUBLISHED Published: 2018-05-10T01:00:00Z Last Updated: 2024-09-17T01:37:08.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows zimbraSSLPrivateKey read access via a GetServer, GetAllServers, or GetAllActiveServers call in the Admin SOAP API. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.zimbra.com/show_bug.cgi?id=108894
CVE ID: CVE-2018-10952 State: PUBLISHED Published: 2018-05-10T02:00:00 Last Updated: 2024-08-05T07:54:35.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222088. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x00222088
CVE ID: CVE-2018-10953 State: PUBLISHED Published: 2018-05-10T02:00:00 Last Updated: 2024-08-05T07:54:36.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x0022204C. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x0022204C
CVE ID: CVE-2018-10954 State: PUBLISHED Published: 2018-05-10T02:00:00 Last Updated: 2024-08-05T07:54:36.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222550. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x00222550
CVE ID: CVE-2018-10955 State: PUBLISHED Published: 2018-05-10T02:00:00 Last Updated: 2024-08-05T07:54:36.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCTL 0x00222548. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x00222548
CVE ID: CVE-2018-10956 State: PUBLISHED Published: 2018-06-25T15:00:00 Last Updated: 2024-08-05T07:54:35.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/148274/IPConfigure-Orchid-VMS-2.0.5-Directory-Traversal-Information-Disclosure.html - https://www.exploit-db.com/exploits/44916/