Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-14829 State: PUBLISHED Published: 2018-09-20T20:00:00Z Last Updated: 2024-09-16T23:12:03.232Z Vendors: Rockwell Automation Products: RSLinx Classic Problem Types: CWE-121 Description: Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-1
ry code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-263-02 - https://www.tenable.com/security/research/tra-2018-26
CVE ID: CVE-2018-14831 State: PUBLISHED Published: 2019-07-10T14:29:53 Last Updated: 2024-08-05T09:38:14.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/feric/98180bad0a73716e143ff8dc03fda12f
CVE ID: CVE-2018-14833 State: PUBLISHED Published: 2019-07-09T12:21:51 Last Updated: 2024-08-05T09:38:14.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intuit Lacerte 2017 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://themikewylie.com/2019/05/21/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/ - https://www.themikewylie.com/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/
CVE ID: CVE-2018-14835 State: PUBLISHED Published: 2018-08-02T00:00:00 Last Updated: 2024-08-05T09:38:14.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/760 - https://github.com/intelliants/subrion/pull/763/commits
CVE ID: CVE-2018-14836 State: PUBLISHED Published: 2018-08-02T00:00:00 Last Updated: 2024-08-05T09:38:14.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/762
CVE ID: CVE-2018-14837 State: PUBLISHED Published: 2018-08-10T16:00:00 Last Updated: 2024-08-05T09:38:13.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfcms/wolfcms/issues/673
CVE ID: CVE-2018-14838 State: PUBLISHED Published: 2018-08-02T01:00:00Z Last Updated: 2024-09-16T18:04:05.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: rejucms 2.1 has stored XSS via the admin/book.php content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZBWACD/CodeAudit/blob/master/rejucms_v2.1
CVE ID: CVE-2018-14839 State: PUBLISHED Published: 2019-05-14T20:01:16.000Z Last Updated: 2025-10-21T23:45:37.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%400x616163/lg-n1a1-unauthenticated-remote-command-injection-cve-2018-14839-9d2cf760e247
CVE ID: CVE-2018-14840 State: PUBLISHED Published: 2018-08-02T01:00:00 Last Updated: 2024-08-05T09:38:13.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/commit/cb10ac2294cb2c3a6d2159f9a2bb8c58a2a10a47 - https://www.exploit-db.com/exploits/45150/ - https://github.com/intelliants/subrion/issues/773
CVE ID: CVE-2018-14846 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T09:38:13.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9186 - https://ansawaf.blogspot.com/2018/10/cve-2018-14846-multiple-stored-xss-in.html - https://cwatch.comodo.com/blog/website-security/vulnerability-found-in-multiple-stored-xss-form-in-wordpress-version-1-2-5/
CVE ID: CVE-2018-14847 State: PUBLISHED Published: 2018-08-02T07:00:00.000Z Last Updated: 2025-10-21T23:45:49.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/45578/ - https://github.com/BigNerd95/WinboxExploit - https://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdf - https://github.com/BasuCert/Win
ps://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdf - https://github.com/BasuCert/WinboxPoC - https://github.com/tenable/routeros/tree/master/poc/cve_2018_14847 - https://n0p.me/winbox-bug-dissection/ - https://github.com/tenable/routeros/tree/master/poc/bytheway - https://mikrotik.com/supportsec/winbox-vulnerability
CVE ID: CVE-2018-14849 State: PUBLISHED Published: 2018-08-13T17:00:00 Last Updated: 2024-08-05T09:38:14.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/08/02/1 - http://www.openwall.com/lists/oss-security/2018/08/02/2 - https://sourceforge.net/p/tikiwiki/code/66809
CVE ID: CVE-2018-14850 State: PUBLISHED Published: 2018-08-13T17:00:00 Last Updated: 2024-08-05T09:38:14.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/tikiwiki/code/66990 - http://www.openwall.com/lists/oss-security/2018/08/02/1 - http://www.openwall.com/lists/oss-security/2018/08/02/2
CVE ID: CVE-2018-14851 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T09:38:14.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104871 - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/ntap-20181107-0003/ - https://usn.ubuntu.com/3766-1/ - https://www.tenable.com/security/tns-2018-
ty.netapp.com/advisory/ntap-20181107-0003/ - https://usn.ubuntu.com/3766-1/ - https://www.tenable.com/security/tns-2018-12 - http://php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=76557 - https://www.debian.org/security/2018/dsa-4353 - https://lists.debian.org/debian-lts-announce/2018/09/msg00000.html - https://usn.ubuntu.com/3766-2/ - https://access.redhat.com/errata/RHSA-2019:2519
CVE ID: CVE-2018-14852 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T09:38:14.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause invalid accesses to operating system memory due to improper validation of the network interface index provided by the Wi-Fi chip's firmware. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/securesystemslab/periscope/blob/master/bugs-found/CVE-201
tes: - CVE Program Container: References: - https://github.com/securesystemslab/periscope/blob/master/bugs-found/CVE-2018-14852.md
CVE ID: CVE-2018-14853 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T09:38:14.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device to reboot. The Samsung ID is SVE-2018-11783. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/securesystemslab/periscope/blob/master/bugs-found/CVE-2018-14853.md
CVE ID: CVE-2018-14854 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T09:38:13.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/securesystemslab/periscope/blob/master/bugs-found/CVE-2018-14854_CVE-2018-14855_CVE-2018-14856.md
CVE ID: CVE-2018-14855 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T09:38:14.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/securesystemslab/periscope/blob/master/bugs-found/CVE-2018-14854_CVE-2018-14855_CVE-2018-14856.md
CVE ID: CVE-2018-14856 State: PUBLISHED Published: 2018-12-17T18:00:00 Last Updated: 2024-08-05T09:38:14.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code execution on the Wi-Fi) chip to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/securesystemslab/periscope/blob/master/bugs-found/CVE-2018-14854_CVE-2018-14855_CVE-2018-14856.md
CVE ID: CVE-2018-14857 State: PUBLISHED Published: 2018-08-06T21:00:00 Last Updated: 2024-08-05T09:38:14.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a template file containing PHP code, because file extensions other than .html are permitted. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Aug/6 - https://github.com/OCSInventory-NG/OCSInventory-ocsreports/commit/cc572819e373f7ff81dec61591b6f465b43c5515 -
18/Aug/6 - https://github.com/OCSInventory-NG/OCSInventory-ocsreports/commit/cc572819e373f7ff81dec61591b6f465b43c5515 - http://www.securitytracker.com/id/1041418
CVE ID: CVE-2018-14858 State: PUBLISHED Published: 2018-08-02T20:00:00 Last Updated: 2024-08-05T09:38:13.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private and reserved IP addresses such as 10.0.0.0/8. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14514. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/33
CVE ID: CVE-2018-14859 State: PUBLISHED Published: 2019-07-03T19:02:51 Last Updated: 2024-08-05T09:38:13.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated users to reset the password of other users by being the first party to use the secure token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/32510
CVE ID: CVE-2018-14860 State: PUBLISHED Published: 2019-07-03T19:01:53 Last Updated: 2024-08-05T09:38:13.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/32505
CVE ID: CVE-2018-14861 State: PUBLISHED Published: 2019-07-03T19:00:04 Last Updated: 2024-08-05T09:38:14.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/32506
CVE ID: CVE-2018-14862 State: PUBLISHED Published: 2019-07-03T18:56:25 Last Updated: 2024-08-05T09:38:14.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/32504
CVE ID: CVE-2018-14863 State: PUBLISHED Published: 2019-07-03T18:53:59 Last Updated: 2024-08-05T09:38:13.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/32508
CVE ID: CVE-2018-14864 State: PUBLISHED Published: 2019-07-03T18:51:29 Last Updated: 2024-08-05T09:38:13.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated users to inject arbitrary web script via a crafted attachment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/32502
CVE ID: CVE-2018-14865 State: PUBLISHED Published: 2019-07-03T18:40:31 Last Updated: 2024-08-05T09:38:13.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkhtmltopdf, which allows remote attackers to read local files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/32501
CVE ID: CVE-2018-14866 State: PUBLISHED Published: 2019-07-03T17:42:07 Last Updated: 2024-08-05T09:38:14.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/32509
CVE ID: CVE-2018-14867 State: PUBLISHED Published: 2019-06-28T17:37:45 Last Updated: 2024-08-05T09:38:14.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/commits/master - https://github.com/odoo/odoo/issues/32503
CVE ID: CVE-2018-14868 State: PUBLISHED Published: 2019-06-28T17:36:34 Last Updated: 2024-08-05T09:38:13.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/odoo/odoo/commits/master - https://github.com/odoo/odoo/issues/32507
CVE ID: CVE-2018-14869 State: PUBLISHED Published: 2018-08-06T21:00:00 Last Updated: 2024-08-05T09:38:14.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45143/ - https://googlequeens.com/2018/08/03/cve-2018-14869-php-template-store-script-3-0-6-stored-xss-vulnerability/
CVE ID: CVE-2018-14872 State: PUBLISHED Published: 2018-08-03T00:00:00 Last Updated: 2024-08-05T09:38:14.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, with all data reset. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/havysec/Useful_Code/blob/master/mycve/004.md
CVE ID: CVE-2018-14873 State: PUBLISHED Published: 2018-08-03T00:00:00 Last Updated: 2024-08-05T09:38:13.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability involving a p=account request to index.php and another file named commonPages.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/havysec/Useful_Code/blob/master/mycve/006.md
CVE ID: CVE-2018-14874 State: PUBLISHED Published: 2019-04-30T18:54:22 Last Updated: 2024-08-05T09:38:14.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input passed through the code parameter in three pages as collaterals/colexe3t.jsp and /references/refsuppu.jsp and /references/refbranu.jsp is mishandled before being used in SQL queries, allowing SQL injection with an authenticated session. Additional Analyst Notes: - CVE Program Container: References: - https://neetech18.blogspot.com/2019/03/error-based-sql-injection-vulnerability.html
CVE ID: CVE-2018-14875 State: PUBLISHED Published: 2019-04-30T18:52:25 Last Updated: 2024-08-05T09:38:14.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://neetech18.blogspot.com/2019/03/reflected-xss-vulnerability-in-polaris.html
CVE ID: CVE-2018-14876 State: PUBLISHED Published: 2018-08-03T00:00:00 Last Updated: 2024-08-05T09:38:13.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FLIF-hub/FLIF/issues/520
CVE ID: CVE-2018-14877 State: PUBLISHED Published: 2018-08-03T00:00:00Z Last Updated: 2024-09-16T19:56:56.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alterebro/WeaselCMS/issues/5
CVE ID: CVE-2018-14878 State: PUBLISHED Published: 2018-08-13T17:00:00 Last Updated: 2024-08-05T09:46:23.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific file, because of Deserialization of Untrusted Data. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/dotnet/2018/08/02/resharper-ultimate-2018-1-4-rider-2018-1-4-released/ - https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/august/aspnet-resource-files-resx-and-deserialisation-issue
ww.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/august/aspnet-resource-files-resx-and-deserialisation-issues/
CVE ID: CVE-2018-14879 State: PUBLISHED Published: 2019-10-03T15:33:33 Last Updated: 2024-08-05T09:46:23.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES - https://github.com/the-tcpdump-group/tcpdump/commit/9ba91381954ad325ea4fd26b9c65a8bd9a2a85b6 - https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html - http://lists.opensuse.org/opensuse-security-