Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-16177 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.210Z Vendors: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: The installer of Windows10 Fall Creators Update Modify module for Security Measures tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify module for Security Measures tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://f-security.jp/v6/support/information/100193.html - https://jvn.jp/en/jp/JVN157
Program Container: References: - https://f-security.jp/v6/support/information/100193.html - https://jvn.jp/en/jp/JVN15709478/index.html
CVE ID: CVE-2018-16178 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.354Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via Single sign-on function. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN25385698/index.html - https://kb.cybozu.support/article/35265
CVE ID: CVE-2018-16179 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.293Z Vendors: Mizuho Bank, Ltd. Products: Mizuho Direct App for Android Problem Types: Fails to verify SSL certificates Description: The Mizuho Direct App for Android version 3.13.0 and earlier does not verify server certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=jp.co.mizuhobank.banking - https://jvn.jp/en/vu/JVNVU91640357/index.html
CVE ID: CVE-2018-16180 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:37.625Z Vendors: Digital Arts Inc. Products: i-FILTER Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in i-FILTER Ver.9.50R05 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN32155106/index.html - https://download.daj.co.jp/user/ifilter/V9/
CVE ID: CVE-2018-16181 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.189Z Vendors: Digital Arts Inc. Products: i-FILTER Problem Types: HTTP header injection Description: HTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks that may result in an arbitrary script injection or setting an arbitrary cookie values via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN32155106/index.html - https://download.daj.co.jp/user/ifilter/V9/
CVE ID: CVE-2018-16182 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.327Z Vendors: Rakuten Securities, Inc. Products: The installer of MARKET SPEED Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of MARKET SPEED Ver.16.4 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://marketspeed.jp/ms1/download/ - https://jvn.jp/en/jp/JVN78422300/index.html
CVE ID: CVE-2018-16183 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.305Z Vendors: Panasonic Corporation Products: Some pre-installed applications on Panasonic PC Problem Types: Unquoted Search Path or Element Description: An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit), Windows 10 (64bit) delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/
trary code with eleveted privileges. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN36895151/index.html - https://pc-dl.panasonic.co.jp/dl/docs/077770
CVE ID: CVE-2018-16184 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.273Z Vendors: RICOH COMPANY, LTD. Products: RICOH Interactive Whiteboard Problem Types: OS Command Injection Description: RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whiteboard Controller Type1 V1.6 to V2.2 attached (D5520, D6500, D6510, D7500, D8400) allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55263945/index.html - https://www.ricoh.com/info/2018/1127_1.html
CVE ID: CVE-2018-16185 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.281Z Vendors: RICOH COMPANY, LTD. Products: RICOH Interactive Whiteboard Problem Types: Firmware file is not signed Description: RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute a malicious program. Additional Analyst Notes: - CVE Program Container: Refe
, D8400) allows remote attackers to execute a malicious program. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55263945/index.html - https://www.ricoh.com/info/2018/1127_1.html
CVE ID: CVE-2018-16186 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.396Z Vendors: RICOH COMPANY, LTD. Products: RICOH Interactive Whiteboard Problem Types: Use of Hard-coded Credentials Description: RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) uses hard-coded credentials, which may allow an attacker on the same network segments to login to the adminis
00, D8400) uses hard-coded credentials, which may allow an attacker on the same network segments to login to the administrators settings screen and change the configuration. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55263945/index.html - https://www.ricoh.com/info/2018/1127_1.html
CVE ID: CVE-2018-16187 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.390Z Vendors: RICOH COMPANY, LTD. Products: RICOH Interactive Whiteboard Problem Types: Fails to verify the server certificate Description: The RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) does not verify its server certificates, which allows man-in-the-middle attackers to eversdrop o
0, D6510, D7500, D8400) does not verify its server certificates, which allows man-in-the-middle attackers to eversdrop on encrypted communication. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55263945/index.html - https://www.ricoh.com/info/2018/1127_1.html
CVE ID: CVE-2018-16188 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.291Z Vendors: RICOH COMPANY, LTD. Products: RICOH Interactive Whiteboard Problem Types: SQL Injection Description: SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additio
(D5520, D6510, D7500, D8400) allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55263945/index.html - https://www.ricoh.com/info/2018/1127_1.html
CVE ID: CVE-2018-16189 State: PUBLISHED Published: 2019-02-13T18:00:00 Last Updated: 2024-08-05T10:17:38.404Z Vendors: Micco Products: Self-Extracting Archives created by UNLHA32.DLL Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52168232/index.html - http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm
CVE ID: CVE-2018-16190 State: PUBLISHED Published: 2019-02-13T18:00:00 Last Updated: 2024-08-05T10:17:38.400Z Vendors: Micco Products: UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52168232/index.html - http://m
. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52168232/index.html - http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm - https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm - http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm - http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm
CVE ID: CVE-2018-16191 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.306Z Vendors: LOCKON CO.,LTD. Products: EC-CUBE Problem Types: Open Redirect Description: Open redirect vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3.0.4, EC-CUBE 3.0.5, EC-CUBE 3.0.6, EC-CUBE 3.0.7, EC-CUBE 3.0.8, EC-CUBE 3.0.9, EC-CUBE 3.0.10, EC-CUBE 3.0.11, EC-CUBE 3.0.12, EC-CUBE 3.0.12-p1, EC-CUBE 3.0.13, EC-CUBE 3.0.14, EC-CUBE 3.0.15, EC-CUBE 3.0.16) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: -
and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/20181113/ - https://jvn.jp/en/jp/JVN25359688/index.html - http://www.securityfocus.com/bid/106545
CVE ID: CVE-2018-16192 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.386Z Vendors: NEC Corporation Products: Aterm WF1200CR and Aterm WG1200CR Problem Types: Information Disclosure Description: Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allow an attacker on the same network segment to obtain information registered on the device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87535892/index.html - https://jpn.nec.com/security-info/secinfo/nv18-021.html
CVE ID: CVE-2018-16193 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.355Z Vendors: NEC Corporation Products: Aterm WF1200CR and Aterm WG1200CR Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87535892/index.html - https://jpn.nec.com/security-info/secinfo/nv18-021.html
CVE ID: CVE-2018-16194 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.393Z Vendors: NEC Corporation Products: Aterm WF1200CR and Aterm WG1200CR Problem Types: OS Command Injection Description: Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows authenticated attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87535892/index.html - https://jpn.nec.com/security-info/secinfo/nv18-021.html
CVE ID: CVE-2018-16195 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.325Z Vendors: NEC Corporation Products: Aterm WF1200CR and Aterm WG1200CR Problem Types: OS Command Injection Description: Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands via SOAP interface of UPnP. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87535892/index.html - https://jpn.nec.com/security-info/secinfo/nv18-021.html
CVE ID: CVE-2018-16196 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.287Z Vendors: Yokogawa Electric Corporation Products: Multiple Yokogawa products that contain Vnet/IP Open Communication Driver Problem Types: Denial-of-service (DoS) Description: Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01.00 - R6.03.10), Exaopc(R3.10.00 - R3.75.00), PRM(R2.06.00 - R3.31.00), ProSafe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90)) allows remote attackers
Safe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90)) allows remote attackers to cause a denial of service attack that may result in stopping Vnet/IP Open Communication Driver's communication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106442 - https://jvn.jp/vu/JVNVU93652047/index.html - https://web-material3.yokogawa.com/YSAR-18-0008-E.pdf
CVE ID: CVE-2018-16197 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.375Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A Problem Types: Fails to restrict access Description: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN99810718/index.html - http://www.tlt.co.jp/tlt/information/seihin/notice/defect
r: References: - https://jvn.jp/en/jp/JVN99810718/index.html - http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm
CVE ID: CVE-2018-16198 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.374Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A Problem Types: Hidden Functionality Description: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow an attacker on the same network segment to access a non-documented developer screen to perform operations on the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN99810718/index.html - http://www.tlt.co.jp/tlt/information/seihin/notice/defect/201812
rences: - https://jvn.jp/en/jp/JVN99810718/index.html - http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm
CVE ID: CVE-2018-16199 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.382Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN99810718/index.html - http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.
tps://jvn.jp/en/jp/JVN99810718/index.html - http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm
CVE ID: CVE-2018-16200 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.261Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A Problem Types: OS Command Injection Description: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN99810718/index.html - http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm
CVE ID: CVE-2018-16201 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.280Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A Problem Types: Use of Hard-coded Credentials Description: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN99810718/index.html -
ommands. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN99810718/index.html - http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm
CVE ID: CVE-2018-16202 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.252Z Vendors: npm, Inc. Products: cordova-plugin-ionic-webview Problem Types: Directory Traversal Description: Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN69812763/index.html - https://github.com/ionic-team/cordova-plugin-ionic-webview - https://www.npmjs.com/advisories/746 - http://jvn.jp/en/jp/JVN60497148/index.
/ionic-team/cordova-plugin-ionic-webview - https://www.npmjs.com/advisories/746 - http://jvn.jp/en/jp/JVN60497148/index.html
CVE ID: CVE-2018-16203 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.333Z Vendors: PgPool Global Development Group Products: PgpoolAdmin Problem Types: Fails to restrict access Description: PgpoolAdmin 4.0 and earlier allows remote attackers to bypass the login authentication and obtain the administrative privilege of the PostgreSQL database via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://pgpool.net/mediawiki/index.php/Main_Page - https://jvn.jp/en/jp/JVN13199224/index.html
CVE ID: CVE-2018-16204 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.395Z Vendors: Arne Brachhold Products: Google XML Sitemaps Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/google-sitemap-generator/#developers - https://jvn.jp/en/jp/JVN27052429/index.html
CVE ID: CVE-2018-16205 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T10:17:38.294Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via New Page modal. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN96493183/index.html - https://weseek.co.jp/security/2018/12/25/growi-prevent-xss2/
CVE ID: CVE-2018-16206 State: PUBLISHED Published: 2019-01-13T00:00:00 Last Updated: 2024-08-05T10:17:38.287Z Vendors: Yohsuke Ohkouchi Products: spam-byebye Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58010349/index.html - https://wordpress.org/plugins/spam-byebye/
CVE ID: CVE-2018-16207 State: PUBLISHED Published: 2019-03-27T13:17:58 Last Updated: 2024-08-05T10:17:38.427Z Vendors: OMRON SOCIAL SOLUTIONS Co.,Ltd. Products: PowerAct Pro Master Agent for Windows Problem Types: Fails to restrict access Description: PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restriction to alter or edit unauthorized files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.oss.omron.co.jp/ups/info/topics/190326.html - https://www.oss.omron.co.jp/ups/support/download/soft/poweractpro/master/poweractpro_master_windows.html - https://jvn.jp/en/jp/JVN63981842/i
.co.jp/ups/support/download/soft/poweractpro/master/poweractpro_master_windows.html - https://jvn.jp/en/jp/JVN63981842/index.html
CVE ID: CVE-2018-16210 State: PUBLISHED Published: 2018-10-12T20:00:00 Last Updated: 2024-08-05T10:17:38.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45581/