Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nary with a malicious one. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151031/KioWare-Server-4.9.6-Privilege-Escalation.html - https://www.exploit-db.com/exploits/46093/ - https://m.kioware.com/news/kioware-press-releases/kioware_server_security_patch_update - https://www.kioware.com/patch.aspx - https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-002.md
CVE ID: CVE-2018-18436 State: PUBLISHED Published: 2018-10-17T05:00:00Z Last Updated: 2024-09-16T18:29:07.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/w3irdo001/demo/blob/master/1.html
CVE ID: CVE-2018-18437 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T11:08:21.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.binaryworld.it/guidepoc.asp - https://www.exploit-db.com/exploits/45668/
CVE ID: CVE-2018-18438 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T11:08:21.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105953 - https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg02402.html - https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg02396.html - http://www.openwall.com/lists/oss-security/2018/10/17/3
CVE ID: CVE-2018-18439 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:08:21.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/11/02/2
CVE ID: CVE-2018-18440 State: PUBLISHED Published: 2018-11-20T19:00:00 Last Updated: 2024-08-05T11:08:21.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/11/02/2 - https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdf
CVE ID: CVE-2018-18441 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:08:21.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many more. There are many affected firmware versions starting from 1.00 and above. The configuration file can be accessed remotely through: <Camera-IP>/common/info.cgi, with no authentication. The configuration file include the following fiel
remotely through: <Camera-IP>/common/info.cgi, with no authentication. The configuration file include the following fields: model, product, brand, version, build, hw_version, nipca version, device name, location, MAC address, IP address, gateway IP address, wireless status, input/output settings, speaker, and sensor settings. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard/blog/i-got-my-eyeon-you-security-vulnerabilities-in-baby-monitor/
CVE ID: CVE-2018-18442 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:08:21.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device availability (i.e., live-online video/audio streaming) by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding, UDP flooding, ICMP flooding, and SYN-ACK flooding. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard/blog/i-got-my-eyeon-you-security-vulnerabilities-in-baby-monito
ferences: - https://dojo.bullguard.com/dojo-by-bullguard/blog/i-got-my-eyeon-you-security-vulnerabilities-in-baby-monitor/
CVE ID: CVE-2018-18443 State: PUBLISHED Published: 2018-10-17T19:00:00 Last Updated: 2024-08-05T11:08:21.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openexr/openexr/issues/350 - https://github.com/openexr/openexr/releases/tag/v2.4.0 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZN7WUH3SR6DSRODRB4SLFTBKP74FVC5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5E2OZU4ZSF5W
P74FVC5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5E2OZU4ZSF5W4ODBU4L547HX5A4WOBFV/
CVE ID: CVE-2018-18444 State: PUBLISHED Published: 2018-10-17T19:00:00 Last Updated: 2024-08-05T11:08:21.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openexr/openexr/issues/351 - https://github.com/openexr/openexr/releases/tag/v2.4.0 - https://usn.ubuntu.com/4148-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZN7WUH3SR6DSRODRB4SLFTBKP74FVC5/ - https://lists.fedoraproject.org/archives/list/
nce%40lists.fedoraproject.org/message/IZN7WUH3SR6DSRODRB4SLFTBKP74FVC5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5E2OZU4ZSF5W4ODBU4L547HX5A4WOBFV/ - https://usn.ubuntu.com/4339-1/
CVE ID: CVE-2018-18445 State: PUBLISHED Published: 2018-10-17T19:00:00 Last Updated: 2024-08-05T11:08:21.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.13 - https://usn.ubuntu.com/3847-1/ - https://usn.ubuntu.com/3835-1/ - https://access.redhat.com/errata/RHSA-2019:0512 - https://usn.ubuntu.
ntu.com/3847-1/ - https://usn.ubuntu.com/3835-1/ - https://access.redhat.com/errata/RHSA-2019:0512 - https://usn.ubuntu.com/3847-2/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.75 - https://usn.ubuntu.com/3832-1/ - https://github.com/torvalds/linux/commit/b799207e1e1816b09e7a5920fbb2d5fcf6edd681 - https://usn.ubuntu.com/3847-3/ - https://access.redhat.com/errata/RHSA-2019:0514 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1686 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b799207e1e1816b09e7a5920fbb2d5fcf6edd681 - https://support.f5.com/csp/article/K38456756
CVE ID: CVE-2018-18446 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-16T13:47:01.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dotpdn.com - https://www.getpaint.net - https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/
CVE ID: CVE-2018-18447 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-16T13:46:17.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dotpdn.com - https://www.getpaint.net - https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/
CVE ID: CVE-2018-18449 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-05T11:08:21.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/w3irdo001/demo/blob/master/3.html
CVE ID: CVE-2018-18450 State: PUBLISHED Published: 2018-10-17T22:00:00 Last Updated: 2024-08-05T11:08:21.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.pbootcms.com/changelog.html - http://www.ttk7.cn/post-96.html
CVE ID: CVE-2018-18454 State: PUBLISHED Published: 2018-10-18T06:00:00 Last Updated: 2024-08-05T11:08:21.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41217 - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16/pdftoppm
CVE ID: CVE-2018-18455 State: PUBLISHED Published: 2018-10-18T06:00:00 Last Updated: 2024-08-05T11:08:21.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41217 - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16/pdftoppm
CVE ID: CVE-2018-18456 State: PUBLISHED Published: 2018-10-18T06:00:00 Last Updated: 2024-08-05T11:08:21.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41217 - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16/pdftoppm
CVE ID: CVE-2018-18457 State: PUBLISHED Published: 2018-10-18T06:00:00 Last Updated: 2024-08-05T11:08:21.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41217 - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16/pdftoppm
CVE ID: CVE-2018-18458 State: PUBLISHED Published: 2018-10-18T06:00:00 Last Updated: 2024-08-05T11:08:21.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41217 - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16/pdftoppm
CVE ID: CVE-2018-18459 State: PUBLISHED Published: 2018-10-18T06:00:00 Last Updated: 2024-08-05T11:08:21.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41217 - https://github.com/TeamSeri0us/pocs/tree/master/xpdf/2018_10_16/pdftoppm
CVE ID: CVE-2018-18460 State: PUBLISHED Published: 2018-10-18T06:00:00 Last Updated: 2024-08-05T11:08:21.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivechat-menu-gdpr-page request. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-live-chat-support/#developers - https://github.com/rakjong/vuln/blob/master/wordpress_wp-live-chat-support_XSS.pdf
CVE ID: CVE-2018-18461 State: PUBLISHED Published: 2018-10-18T06:00:00 Last Updated: 2024-08-05T11:08:21.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code in attachments[] data to models/attachment.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bft-autoresponder/#developers - https://github.com/rakjong/vuln/blob/master/woedpress-Arigato%20Autoresponder_and_Newsletter-getshell.pdf
CVE ID: CVE-2018-18466 State: PUBLISHED Published: 2019-03-18T20:09:45.000Z Last Updated: 2025-05-30T16:01:07.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in the DEBUG folder) that can be accessed by anyone. NOTE: The vendor disputes this as a vulnerability since the disclosure of a local account password (actually an alpha numeric passcode) is achievable only when a custom registry key is added to the windows registry. This action requires administrator access and the registry key
n a custom registry key is added to the windows registry. This action requires administrator access and the registry key is only provided by support staff at securenvoy to troubleshoot customer issues. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2018-18466/ - https://www.excellium-services.com/cert-xlm-advisory - https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-18466
CVE ID: CVE-2018-18467 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T11:08:21.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom message to an existing opened conversation by sending an intent. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/siacs/Conversations/commit/7177c523a1b31988666b9337249a4f1d0c36f479
CVE ID: CVE-2018-18471 State: PUBLISHED Published: 2019-06-19T15:48:16 Last Updated: 2024-08-05T11:08:21.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: /api/2.0/rest/aggregator/xml in Axentra firmware, used by NETGEAR Stora, Seagate GoFlex Home, and MEDION LifeCloud, has an XXE vulnerability that can be chained with an SSRF bug to gain remote command execution as root. It can be triggered by anyone who knows the IP address of the affected device. Additional Analyst Notes: - CVE Program Container: References: - http://www.axentra.com/en/ - https://www.wizcase.com/blog/hack-2018/
CVE ID: CVE-2018-18472 State: PUBLISHED Published: 2019-06-19T15:44:20 Last Updated: 2024-08-05T11:08:21.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the wild in June 2021 for factory reset commands, Additional Analyst Notes: - CVE Program Container: References: - https://www.wizcase.com/blog/hack-2018/ - https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-s
https://www.wizcase.com/blog/hack-2018/ - https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo - https://community.wd.com/t/action-required-on-my-book-live-and-my-book-live-duo/268147
CVE ID: CVE-2018-18473 State: PUBLISHED Published: 2019-03-19T22:19:42 Last Updated: 2024-08-05T11:08:21.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the _secret1.htm URI. Subsequently, the default password of root for the root account allows an attacker to conduct remote code execution and as a result take over the system. Additional Analyst Notes: - CVE Program Container: References
emote code execution and as a result take over the system. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/wp-content/uploads/sites/4/usd20180020.txt - https://www.patlite.com/support/Security_Informationtest.html
CVE ID: CVE-2018-18475 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T11:08:21.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html - http://seclists.org/fulldisclosure/2018/Oct/42
CVE ID: CVE-2018-18476 State: PUBLISHED Published: 2018-10-24T21:00:00 Last Updated: 2024-08-05T11:08:21.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/viraptor/881276ea61e8d56bac6e28454c79f1e6 - https://github.com/nedap/mysql-binuuid-rails/pull/18
CVE ID: CVE-2018-18478 State: PUBLISHED Published: 2018-10-18T18:00:00 Last Updated: 2024-08-05T11:08:21.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the /ajax_form.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and html/includes/forms/edit-dashboard.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/librenms/librenms/releases/tag/1.44 - https://github.com/librenms/librenms/issues/9170 - https://hackpu
tps://github.com/librenms/librenms/releases/tag/1.44 - https://github.com/librenms/librenms/issues/9170 - https://hackpuntes.com/cve-2018-18478-libre-nms-1-43-cross-site-scripting-persistente/ - https://github.com/librenms/librenms/pull/9171
CVE ID: CVE-2018-18479 State: REJECTED Published: 2020-03-02T19:36:59 Last Updated: 2020-03-02T19:36:59 Description: No description available.
CVE ID: CVE-2018-18480 State: PUBLISHED Published: 2018-10-18T18:00:00Z Last Updated: 2024-09-16T19:56:35.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandyre/libopencad/issues/43
CVE ID: CVE-2018-18481 State: PUBLISHED Published: 2018-10-18T18:00:00 Last Updated: 2024-08-05T11:08:21.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadCHAR function in lib/dwg/io.cpp, resulting in an application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandyre/libopencad/issues/43
CVE ID: CVE-2018-18482 State: PUBLISHED Published: 2018-10-18T18:00:00Z Last Updated: 2024-09-16T16:53:26.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lfittl/libpg_query/issues/49
CVE ID: CVE-2018-18483 State: PUBLISHED Published: 2018-10-18T20:00:00 Last Updated: 2024-08-05T11:08:21.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105689 - https://sourceware.org/bugzilla/show_bug.cgi?id=23767 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87602 - http://
9 - https://sourceware.org/bugzilla/show_bug.cgi?id=23767 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87602 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-18484 State: PUBLISHED Published: 2018-10-18T20:00:00 Last Updated: 2024-08-05T11:08:21.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplus_demangle_type, d_bare_function_type, d_function_type. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105693 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87636 - http://lists.opensuse.org/opensuse-security-announce/2019-10/
693 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87636 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-18485 State: PUBLISHED Published: 2018-10-18T21:00:00Z Last Updated: 2024-09-16T19:40:02.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/koyshe/phpshe/issues/INOG4