Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1130 State: PUBLISHED Published: 2018-05-10T13:00:00 Last Updated: 2024-08-05T03:51:48.970Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: unspecified Products: kernel Problem Types: CWE-476 Description: Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - https://usn.ubuntu.com/365
/errata/RHSA-2018:3083 - https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - https://usn.ubuntu.com/3654-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1130 - https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94 - https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html - https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html - https://access.redhat.com/errata/RHSA-2018:1854 - https://usn.ubuntu.com/3697-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://usn.ubuntu.com/3697-2/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f
3697-2/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f834236e2 - https://usn.ubuntu.com/3654-2/ - https://usn.ubuntu.com/3698-1/ - https://usn.ubuntu.com/3656-1/ - https://access.redhat.com/errata/RHSA-2018:3096 - https://marc.info/?l=linux-netdev&m=152036596825220&w=2 - https://usn.ubuntu.com/3698-2/
CVE ID: CVE-2018-1131 State: PUBLISHED Published: 2018-05-15T13:00:00Z Last Updated: 2024-09-16T23:16:45.728Z Vendors: Red Hat, Inc. Products: infinispan Problem Types: CWE-349 Description: Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. Versions 9.0.3.Final, 9.1.7.Final, 8.2.10.Final, 9.2.2.Final, 9.3.0.Alpha1 are believed to be affected. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.c
are believed to be affected. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1576492 - http://www.securityfocus.com/bid/104218 - https://access.redhat.com/errata/RHSA-2018:1833 - https://access.redhat.com/errata/RHSA-2019:3892
CVE ID: CVE-2018-1132 State: PUBLISHED Published: 2018-06-20T13:00:00 Last Updated: 2024-08-05T03:51:48.839Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: [UNKNOWN] Products: opendaylight Problem Types: CWE-89 Description: A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component's database (SQLite) without authenticating to the controller or SDNInterfaceapp. SDNInterface has been deprecated in OpenDayLight since it was last used in the final Carbon series release. In addition to the component not being included in OpenDayLight in newer releases, the SDNInterface component is not packaged in the opendaylight package in
ng included in OpenDayLight in newer releases, the SDNInterface component is not packaged in the opendaylight package included in RHEL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44747/ - http://www.securityfocus.com/bid/104238 - https://jira.opendaylight.org/browse/SDNINTRFAC-14 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1132
CVE ID: CVE-2018-1133 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T03:51:48.719Z Vendors: n/a Products: Moodle 3.x unknown Problem Types: eval injection Description: An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=371199 - https://www.exploit-db.com/exploits/46551/ - http://www.securityfocus.com/bid/104307
CVE ID: CVE-2018-1134 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T03:51:48.852Z Vendors: n/a Products: Moodle 3.x unknown Problem Types: incorrect access control Description: An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=371200 - http://www.securityfocus.com/bid/104307
CVE ID: CVE-2018-1135 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T03:51:48.903Z Vendors: n/a Products: Moodle 3.x unknown Problem Types: incorrect access control Description: An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=371201 - http://www.securityfocus.com/bid/104307
CVE ID: CVE-2018-1136 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T03:51:48.694Z Vendors: n/a Products: Moodle 3.x unknown Problem Types: incorrect access control Description: An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is visible to this user only. Through this security vulnerability, users can move such a block to other pages where they can be viewed by other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104307 - https://moodle.org/mod/forum/discuss.php?
CVE Program Container: References: - http://www.securityfocus.com/bid/104307 - https://moodle.org/mod/forum/discuss.php?d=371202
CVE ID: CVE-2018-1137 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T03:51:48.791Z Vendors: n/a Products: Moodle 3.x unknown Problem Types: incorrect access control Description: An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104307 - https://moodle.org/mod/forum/discuss.php?d=371204
CVE ID: CVE-2018-1138 State: REJECTED Published: 2021-06-28T11:49:40 Last Updated: 2021-06-28T11:49:40 Description: No description available.
CVE ID: CVE-2018-1139 State: PUBLISHED Published: 2018-08-22T14:00:00 Last Updated: 2024-08-05T03:51:48.837Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: The Samba Team Products: samba Problem Types: CWE-20 Description: A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2613 - https://usn.ubuntu.com/3738-1/ - https://access.r
ainer: References: - https://access.redhat.com/errata/RHSA-2018:2613 - https://usn.ubuntu.com/3738-1/ - https://access.redhat.com/errata/RHSA-2018:2612 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1139 - http://www.securityfocus.com/bid/105084 - https://access.redhat.com/errata/RHSA-2018:3056 - https://security.netapp.com/advisory/ntap-20180814-0001/ - https://www.samba.org/samba/security/CVE-2018-1139.html - https://security.gentoo.org/glsa/202003-52
CVE ID: CVE-2018-1140 State: PUBLISHED Published: 2018-08-22T14:00:00 Last Updated: 2024-08-05T03:51:48.625Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: The Samba Team Products: samba Problem Types: CWE-20 Description: A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.samba.org/show_bug.cgi?id=13374 - https://www.samba.org/samba/secu
CVE Program Container: References: - https://bugzilla.samba.org/show_bug.cgi?id=13374 - https://www.samba.org/samba/security/CVE-2018-1140.html - https://security.netapp.com/advisory/ntap-20180814-0001/ - http://www.securityfocus.com/bid/105082 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1140 - https://security.gentoo.org/glsa/202003-52
CVE ID: CVE-2018-1141 State: PUBLISHED Published: 2018-03-20T18:00:00Z Last Updated: 2024-09-16T17:58:22.224Z Vendors: Tenable Products: Nessus Problem Types: Local Privilege Escalation Description: When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the installation location. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2018-01 - http://www.securitytracker.com/id/1040557
CVE ID: CVE-2018-1142 State: PUBLISHED Published: 2018-03-28T13:00:00Z Last Updated: 2024-09-17T03:23:47.452Z Vendors: Tenable Products: Tenable Appliance Problem Types: Cross Site Scripting (XSS) Description: Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability. Utilizing a specially crafted request, an authenticated attacker could potentially execute arbitrary JavaScript code by manipulating certain URL parameters related to offline plugins. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2018-02
CVE ID: CVE-2018-1143 State: PUBLISHED Published: 2018-04-19T13:00:00Z Last Updated: 2024-09-17T04:23:50.055Z Vendors: Belkin Products: N750 DB Wi-Fi Dual-Band N+ Gigabit Router (F9K1103) Problem Types: Command Injection Description: A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to twonky_command.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-08
CVE ID: CVE-2018-1144 State: PUBLISHED Published: 2018-04-19T13:00:00Z Last Updated: 2024-09-16T17:58:17.596Z Vendors: Belkin Products: N750 DB Wi-Fi Dual-Band N+ Gigabit Router (F9K1103) Problem Types: Command Injection Description: A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-08
CVE ID: CVE-2018-1145 State: PUBLISHED Published: 2018-04-19T13:00:00Z Last Updated: 2024-09-17T04:29:40.231Z Vendors: Belkin Products: N750 DB Wi-Fi Dual-Band N+ Gigabit Router (F9K1103) Problem Types: Stack Buffer Overflow Description: A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-08
CVE ID: CVE-2018-1146 State: PUBLISHED Published: 2018-04-19T13:00:00Z Last Updated: 2024-09-17T00:01:47.238Z Vendors: Belkin Products: N750 DB Wi-Fi Dual-Band N+ Gigabit Router (F9K1103) Problem Types: Improper Access Control Description: A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-08
CVE ID: CVE-2018-1147 State: PUBLISHED Published: 2018-05-18T22:00:00Z Last Updated: 2024-09-16T22:09:28.813Z Vendors: Tenable Products: Tenable Nessus Problem Types: CrossSite Scripting (XSS) Description: In Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation. A remote authenticated attacker could create and upload a .nessus file, which may be viewed by an administrator allowing for the execution of arbitrary script code in a user's browser session. In other scenarios, XSS could also occur by altering variables from the Advanced Settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2018-05 - http://www.se
ional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2018-05 - http://www.securitytracker.com/id/1040918
CVE ID: CVE-2018-1148 State: PUBLISHED Published: 2018-05-18T22:00:00Z Last Updated: 2024-09-17T04:09:03.404Z Vendors: Tenable Products: Tenable Nessus Problem Types: Session Fixation Description: In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application. An authenticated attacker could maintain system access due to session fixation after a user password change. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2018-05 - http://www.securitytracker.com/id/1040918
CVE ID: CVE-2018-1149 State: PUBLISHED Published: 2018-09-19T15:00:00Z Last Updated: 2024-09-16T20:42:10.870Z Vendors: NUUO Products: NUUO NVRMini2 Problem Types: Stack buffer overflow Description: cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.nuuo.com/backend/CKEdit/upload/files/NUUO_NVRsolo_v3_9_1_Release%20note.pdf - https://github.com/tenable/poc/tree/master/nuuo/nvrmini2 - https://www.tenable.com/security/research/tra-2018-25 - http://www.securityfocus.com/bid/105720
CVE ID: CVE-2018-1150 State: PUBLISHED Published: 2018-09-19T15:00:00Z Last Updated: 2024-09-17T04:08:55.307Z Vendors: NUUO Products: NUUO NVRMini2 Problem Types: Backdoor Description: NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the file /tmp/moses exists. Additional Analyst Notes: - CVE Program Container: References: - https://www.nuuo.com/backend/CKEdit/upload/files/NUUO_NVRsolo_v3_9_1_Release%20note.pdf - https://www.tenable.com/security/research/tra-2018-25 - http://www.securityfocus.com/bid/105720
CVE ID: CVE-2018-1151 State: PUBLISHED Published: 2018-06-12T17:00:00Z Last Updated: 2024-09-17T00:06:37.903Z Vendors: Western Digital Products: TV Media Player, TV Live Hub Problem Types: Arbitrary Code Execution Description: The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-14
CVE ID: CVE-2018-1152 State: PUBLISHED Published: 2018-06-18T14:00:00Z Last Updated: 2024-09-17T03:53:43.845Z Vendors: Tenable Products: libjpeg-turbo Problem Types: Denial of Service Description: libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104543 - https://usn.ubuntu.com/3706-2/ - https://www.tenable.com/security/research/tra-2018-17 - https://usn.ubuntu.com/3706-1/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html - https://github.com/libjpeg-turbo/libjpeg-turbo/commit/43e84cff1bb2bd8
an.org/debian-lts-announce/2019/01/msg00015.html - https://github.com/libjpeg-turbo/libjpeg-turbo/commit/43e84cff1bb2bd8293066f6ac4eb0df61ddddbc6 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00033.html
CVE ID: CVE-2018-1153 State: PUBLISHED Published: 2018-06-18T14:00:00Z Last Updated: 2024-09-17T03:23:40.618Z Vendors: Tenable Products: Burp Suite Community Edition Problem Types: Improper Certificate Validation Description: Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic. Additional Analyst Notes: - CVE Program Container: References: - http://releases.portswigger.net/2018/06/1734.html - https://www.tenable.com/security/research/tra-2018-18
CVE ID: CVE-2018-1154 State: PUBLISHED Published: 2018-08-02T19:00:00Z Last Updated: 2024-09-16T17:42:52.205Z Vendors: Tenable Products: SecurityCenter Problem Types: Username Enumeration Description: In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2018-11 - http://www.securitytracker.com/id/1041431
CVE ID: CVE-2018-1155 State: PUBLISHED Published: 2018-08-02T19:00:00Z Last Updated: 2024-09-17T01:32:05.620Z Vendors: Tenable Products: SecurityCenter Problem Types: Cross-Site Scripting (XSS) Description: In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2018-11 - http://www.securitytracker.com/id/1041431
CVE ID: CVE-2018-1156 State: PUBLISHED Published: 2018-08-23T19:00:00Z Last Updated: 2024-09-16T19:31:35.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theoretically allow a remote authenticated attacker execute arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-21 - https://mikrotik.com/download/changelogs - https://mikrotik.com/download/changelogs/bugfix-release-tree
CVE ID: CVE-2018-1157 State: PUBLISHED Published: 2018-08-23T19:00:00Z Last Updated: 2024-09-17T02:56:35.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system via a crafted HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-21 - https://mikrotik.com/download/changelogs - https://mikrotik.com/download/changelogs/bugfix-release-tree - http://seclists.org/fulldisclosure/2019/Jul/20
CVE ID: CVE-2018-1158 State: PUBLISHED Published: 2018-08-23T19:00:00Z Last Updated: 2024-09-16T22:36:00.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-21 - https://mikrotik.com/download/changelogs - https://mikrotik.com/download/changelogs/bugfix-release-tree - http://seclists.org/fulldisclosure/2019/Jul/20
CVE ID: CVE-2018-1159 State: PUBLISHED Published: 2018-08-23T19:00:00Z Last Updated: 2024-09-16T18:23:55.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote attacker can crash the HTTP server by rapidly authenticating and disconnecting. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2018-21 - https://mikrotik.com/download/changelogs - https://mikrotik.com/download/changelogs/bugfix-release-tree
CVE ID: CVE-2018-1160 State: PUBLISHED Published: 2018-12-20T21:00:00Z Last Updated: 2024-09-16T22:35:09.751Z Vendors: Netatalk Products: Netatalk Problem Types: CWE-787 Description: Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://netatalk.sourceforge.net/3.1/ReleaseNotes3.1.12.html - https://attachments.samba.org/attachment.cgi?id=14735 - http://www.securityfocus.com/bid/106301 - https://www.exploit-db.com/exploits/460
ts.samba.org/attachment.cgi?id=14735 - http://www.securityfocus.com/bid/106301 - https://www.exploit-db.com/exploits/46034/ - https://github.com/tenable/poc/tree/master/netatalk/cve_2018_1160/ - https://www.exploit-db.com/exploits/46048/ - https://www.synology.com/security/advisory/Synology_SA_18_62 - https://www.tenable.com/security/research/tra-2018-48 - https://www.debian.org/security/2018/dsa-4356 - https://www.exploit-db.com/exploits/46675/ - http://packetstormsecurity.com/files/152440/QNAP-Netatalk-Authentication-Bypass.html
CVE ID: CVE-2018-1161 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T03:51:48.973Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart request, the process does not properly validate the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Wa
it to a stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-4215. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-004
CVE ID: CVE-2018-1162 State: PUBLISHED Published: 2018-02-08T18:00:00 Last Updated: 2024-08-05T03:51:48.995Z Vendors: Quest Products: Quest NetVault Backup Problem Types: CWE-22 Description: This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2.0.13. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within the handling of Export requests. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to arbitr