Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-17584 State: PUBLISHED Published: 2019-04-15T19:41:21 Last Updated: 2024-08-05T10:54:10.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit?usp=sharing - https://ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.html - https://wpvulndb.com/vulnerabilities/9696
CVE ID: CVE-2018-17585 State: PUBLISHED Published: 2019-04-15T19:43:52 Last Updated: 2024-08-05T10:54:10.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit?usp=sharing - https://ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.html - https://wpvulndb.com/vulnerabilities/9696
CVE ID: CVE-2018-17586 State: PUBLISHED Published: 2019-04-15T19:45:15 Last Updated: 2024-08-05T10:54:10.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit?usp=sharing - https://ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.html - https://wpvulndb.com/vulnerabilities/9696
CVE ID: CVE-2018-17587 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:09.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149600/Airties-AIR5750-1.0.0.18-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/45525/
CVE ID: CVE-2018-17588 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:10.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45525/ - http://packetstormsecurity.com/files/149598/Airties-AIR5021-1.0.0.18-Cross-Site-Scripting.html
CVE ID: CVE-2018-17589 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:10.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149599/Airties-AIR5650-1.0.0.18-Cross-Site-Scripting.html
CVE ID: CVE-2018-17590 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:10.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149594/Airties-AIR5443v2-1.0.0.18-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/45525/
CVE ID: CVE-2018-17591 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:10.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149592/Airties-AIR5343v2-1.0.0.18-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/45525/
CVE ID: CVE-2018-17593 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:10.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149595/Airties-AIR5453-1.0.0.18-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/45525/
CVE ID: CVE-2018-17594 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:10.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149593/Airties-AIR5442-1.0.0.18-Cross-Site-Scripting.html
CVE ID: CVE-2018-17595 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:10.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were discovered via the /backend/ajax URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/149596/CVE-2018-17595.txt
CVE ID: CVE-2018-17596 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:54:10.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149597/ManageEngine-AssetExplorer-6.2.0-Cross-Site-Scripting.html
CVE ID: CVE-2018-17605 State: PUBLISHED Published: 2018-09-28T09:00:00 Last Updated: 2024-08-05T10:54:10.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Asset Pipeline plugin before 3.0.4 for Grails. An attacker can perform directory traversal via a crafted request when a servlet-based application is executed in Jetty, because there is a classloader vulnerability that can allow a reverse file traversal route in AssetPipelineFilter.groovy or AssetPipelineFilterCore.groovy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bertramdev/asset-pipeline/commit/a29533c52e4b60e244082433e116d2a038d01017 - https://github.c
ences: - https://github.com/bertramdev/asset-pipeline/commit/a29533c52e4b60e244082433e116d2a038d01017 - https://github.com/grails/grails-core/issues/11068
CVE ID: CVE-2018-17606 State: REJECTED Published: 2019-05-01T17:30:28 Last Updated: 2019-05-01T17:30:28 Description: No description available.
CVE ID: CVE-2018-17607 State: PUBLISHED Published: 2018-09-28T09:00:00Z Last Updated: 2024-09-17T01:51:11.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17608 State: PUBLISHED Published: 2018-09-28T09:00:00Z Last Updated: 2024-09-17T02:26:54.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17609 State: PUBLISHED Published: 2018-09-28T09:00:00Z Last Updated: 2024-09-17T00:31:11.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17610 State: PUBLISHED Published: 2018-09-28T09:00:00Z Last Updated: 2024-09-16T22:55:33.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17611 State: PUBLISHED Published: 2018-09-28T09:00:00Z Last Updated: 2024-09-17T03:17:54.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17612 State: PUBLISHED Published: 2018-11-09T21:00:00 Last Updated: 2024-08-05T10:54:10.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private key in the SennComCCKey.pem file within the public software distribution, which allows remote attackers to spoof arbitrary web sites or software publishers for several years, even if the HeadSetup product is uninstalled. NOTE: a vulnerability-assessment approach must check all Windows systems for CA certificates with a CN of 127.0.0.1 or SennComRootCA, and determine wheth
approach must check all Windows systems for CA certificates with a CN of 127.0.0.1 or SennComRootCA, and determine whether those certificates are unwanted. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180029 - https://www.secorvo.de/publikationen/headsetup-vulnerability-report-secorvo-2018.pdf - http://www.securityfocus.com/bid/106045
CVE ID: CVE-2018-17613 State: PUBLISHED Published: 2018-09-28T10:00:00 Last Updated: 2024-08-05T10:54:10.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/oss-sec/2018/q3/280 - https://www.inputzero.io/2018/09/telegram-share-password-in-cleartext.html
CVE ID: CVE-2018-17614 State: PUBLISHED Published: 2018-11-13T21:00:00 Last Updated: 2024-08-05T10:54:10.274Z Vendors: Losant Products: Losant Arduino MQTT Client Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT Client prior to V2.7. User interaction is not required to exploit this vulnerability. The specific flaw exists within the parsing of MQTT PUBLISH packets. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of t
it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6436. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-1337 - https://github.com/knolleary/pubsubclient/releases/tag/v2.7
CVE ID: CVE-2018-17615 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.246Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Mouse Exit events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the contex
prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6333. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1096
CVE ID: CVE-2018-17616 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.228Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of onBlur events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of
or to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6334. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1097
CVE ID: CVE-2018-17617 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.246Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of onFocus events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context o
ior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6335. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1098
CVE ID: CVE-2018-17618 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.647Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Selection Change events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the
object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6336. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-1099 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-17619 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.425Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Validate events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context
rior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6352. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1100
CVE ID: CVE-2018-17620 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.498Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context
prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6353. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1101
CVE ID: CVE-2018-17621 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.217Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Format events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of
or to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6355. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1102
CVE ID: CVE-2018-17622 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.313Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate events. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability t
lied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6354. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1103
CVE ID: CVE-2018-17623 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.293Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Link objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of
r to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6434. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1104
CVE ID: CVE-2018-17624 State: PUBLISHED Published: 2018-10-29T22:00:00 Last Updated: 2024-08-05T10:54:10.296Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of OCG objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of t
to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6435. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-1105
CVE ID: CVE-2018-17625 State: PUBLISHED Published: 2019-01-24T04:00:00 Last Updated: 2024-08-05T10:54:10.289Z Vendors: Foxit Products: Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the setInterval() method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the conte
t prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6438. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-1094/ - https://www.foxitsoftware.com/support/security-bulletins.php