Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-12086 State: PUBLISHED Published: 2018-09-14T21:00:00 Last Updated: 2024-08-05T08:24:03.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041909 - http://www.securityfocus.com/bid/105538 - https://www.debian.org/security/2018/dsa-4359 - https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-12087 State: PUBLISHED Published: 2018-10-03T18:00:00 Last Updated: 2024-08-05T08:24:03.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords. Additional Analyst Notes: - CVE Program Container: References: - https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12087.pdf
CVE ID: CVE-2018-12088 State: PUBLISHED Published: 2018-06-10T23:00:00Z Last Updated: 2024-09-16T20:16:55.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is related to the checksum_basic_mapping function. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/nikratio/s3ql/issues/272/t3_verifypy-test_retrieve-sometimes-fails - https://groups.google.com/foru
ttps://bitbucket.org/nikratio/s3ql/issues/272/t3_verifypy-test_retrieve-sometimes-fails - https://groups.google.com/forum/#%21topic/s3ql/4TzCVIMkA4o - https://bitbucket.org/nikratio/s3ql/commits/85aba5c2d5c81453a73a50ed638adaeef0521020
CVE ID: CVE-2018-12089 State: PUBLISHED Published: 2018-06-11T10:00:00Z Last Updated: 2024-09-16T16:23:37.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Service Fabric Cluster target is configured in Azure Active Directory security mode and a deployment is executed with OctopusPrintVariables set to True. This is fixed in 2018.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/4628
CVE ID: CVE-2018-12090 State: PUBLISHED Published: 2018-06-11T10:00:00 Last Updated: 2024-08-05T08:24:03.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.lamsfoundation.org/browse/LDEV-4600 - https://www.exploit-db.com/exploits/45153/
CVE ID: CVE-2018-12092 State: PUBLISHED Published: 2018-06-11T11:00:00 Last Updated: 2024-08-05T08:24:03.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syoyo/tinyexr/issues/78
CVE ID: CVE-2018-12093 State: PUBLISHED Published: 2018-06-11T11:00:00 Last Updated: 2024-08-05T08:24:03.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syoyo/tinyexr/issues/79
CVE ID: CVE-2018-12094 State: PUBLISHED Published: 2018-06-11T11:00:00 Last Updated: 2024-08-05T08:24:03.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44897/ - https://cxsecurity.com/issue/WLB-2018060091
CVE ID: CVE-2018-12095 State: PUBLISHED Published: 2018-06-11T11:00:00 Last Updated: 2024-08-05T08:24:03.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerability is located in the mod parameter of info.php. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018060092 - https://www.exploit-db.com/exploits/44895/
CVE ID: CVE-2018-12096 State: PUBLISHED Published: 2018-06-19T21:00:00 Last Updated: 2024-08-05T08:24:03.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jun/33
CVE ID: CVE-2018-12097 State: PUBLISHED Published: 2018-06-19T21:00:00 Last Updated: 2024-08-05T08:24:03.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The liblnk_location_information_read_data function in liblnk_location_information.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jun/33
CVE ID: CVE-2018-12098 State: PUBLISHED Published: 2018-06-19T21:00:00 Last Updated: 2024-08-05T08:24:03.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jun/33
CVE ID: CVE-2018-12099 State: PUBLISHED Published: 2018-06-11T11:00:00 Last Updated: 2024-08-05T08:24:03.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grafana/grafana/pull/11813 - https://github.com/grafana/grafana/releases/tag/v5.2.0-beta1 - https://security.netapp.com/advisory/ntap-20190416-0004/
CVE ID: CVE-2018-12100 State: PUBLISHED Published: 2018-06-11T11:00:00 Last Updated: 2024-08-05T08:24:03.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI. Additional Analyst Notes: - CVE Program Container: References: - https://issues.sonatype.org/plugins/servlet/mobile#issue/NEXUS-16870 - https://community.sonatype.com/t/repository-manager-3-12-0-released/31 - https://support.sonatype.com/hc/en-us/articles/360018565994-CVE-2018-12100-Nexus-Repository-Manager-3-Cross-Site-Scripting-XSS-June-4th-2018 - https://issues.sonatype.org/secure/ReleaseNote.jspa?version=17493&
ry-Manager-3-Cross-Site-Scripting-XSS-June-4th-2018 - https://issues.sonatype.org/secure/ReleaseNote.jspa?version=17493&projectId=10001
CVE ID: CVE-2018-12101 State: PUBLISHED Published: 2019-08-15T16:47:15 Last Updated: 2024-08-05T08:24:03.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ClipperCMS/ClipperCMS/issues/487 - https://github.com/ClipperCMS/ClipperCMS/issues/488 - https://github.com/ClipperCMS/ClipperCMS/issues/496
CVE ID: CVE-2018-12102 State: PUBLISHED Published: 2018-06-11T13:00:00 Last Updated: 2024-08-05T08:24:03.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Edward-L/fuzzing-pocs/tree/master/md4c - https://github.com/mity/md4c/issues/41
CVE ID: CVE-2018-12103 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T08:24:03.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisions). Due to the predictability of the /docs/captcha_(number).jpeg URI, being local to the network, but unauthenticated to the administrator's panel, an attacker can disclose the CAPTCHAs used by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts to the
by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts to the access point. Additional Analyst Notes: - CVE Program Container: References: - https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10099 - http://seclists.org/fulldisclosure/2018/Jul/13
CVE ID: CVE-2018-12104 State: PUBLISHED Published: 2018-06-17T20:00:00 Last Updated: 2024-08-05T08:24:03.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/new_report.kp URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/airbnb/knowledge-repo/issues/431 - http://www.securityfocus.com/bid/104487
CVE ID: CVE-2018-12108 State: PUBLISHED Published: 2018-06-11T13:00:00Z Last Updated: 2024-09-16T23:51:17.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service (SIGFPE and application crash) via a malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/107
CVE ID: CVE-2018-12109 State: PUBLISHED Published: 2018-06-11T13:00:00Z Last Updated: 2024-09-16T17:47:45.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Free Lossless Image Format (FLIF) 0.3. The TransformPaletteC<FileIO>::process function in transform/palette_C.hpp allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PAM image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FLIF-hub/FLIF/issues/513
CVE ID: CVE-2018-12110 State: PUBLISHED Published: 2018-06-11T13:00:00 Last Updated: 2024-08-05T08:24:03.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oyeahtime/test/issues/2
CVE ID: CVE-2018-12111 State: PUBLISHED Published: 2018-06-11T13:00:00 Last Updated: 2024-08-05T08:24:03.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the /wt3/mydocs.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44882/ - https://gist.github.com/huykha/b16109b8e859a992b658dd18b2ee4a7c
CVE ID: CVE-2018-12112 State: PUBLISHED Published: 2018-06-11T14:00:00Z Last Updated: 2024-09-17T00:51:50.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mity/md4c/issues/42
CVE ID: CVE-2018-12113 State: PUBLISHED Published: 2018-07-05T20:00:00 Last Updated: 2024-08-05T08:24:03.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/berkgoksel/e97b3f3b15e2f8293f649d4ebe6a6fc9 - https://gist.github.com/berkgoksel/a654c8cb661c7a27a3f763dee92016aa - http://packetstormsecurity.com/files/148383/Core-FTP-LE-2.2-Buffer-Overflow.html
CVE ID: CVE-2018-12114 State: PUBLISHED Published: 2018-06-14T17:00:00 Last Updated: 2024-08-05T08:24:03.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44887/ - http://www.iwantacve.cn/index.php/archives/42/ - https://www.cnblogs.com/v1vvwv/p/9168309.html
CVE ID: CVE-2018-12115 State: PUBLISHED Published: 2018-08-21T13:00:00Z Last Updated: 2024-09-16T16:48:58.679Z Vendors: The Node.js Project Products: Node.js Problem Types: CWE-787 Description: In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'`), `Buffer#write()` can be abused to write outside of the bounds of a single `Buffer`. Writes that start from the second-to-last position of a buffer cause a miscalculation of the maximum length of the input bytes to be written. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid
t bytes to be written. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105127 - https://access.redhat.com/errata/RHSA-2018:2552 - https://access.redhat.com/errata/RHSA-2018:2553 - https://access.redhat.com/errata/RHSA-2018:2944 - https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/ - https://access.redhat.com/errata/RHSA-2018:3537 - https://access.redhat.com/errata/RHSA-2018:2949 - https://security.gentoo.org/glsa/202003-48
CVE ID: CVE-2018-12116 State: PUBLISHED Published: 2018-11-28T17:00:00 Last Updated: 2024-08-05T08:24:03.673Z Vendors: The Node.js Project Products: Node.js Problem Types: CWE-115 Description: Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ - https://access.redhat.com/errata/RHSA-2019:
https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ - https://access.redhat.com/errata/RHSA-2019:1821 - https://security.gentoo.org/glsa/202003-48
CVE ID: CVE-2018-12120 State: PUBLISHED Published: 2018-11-28T17:00:00 Last Updated: 2024-08-05T08:24:03.745Z Vendors: The Node.js Project Products: Node.js Problem Types: CWE-419 Description: Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens to port 5858 on all interfaces by default. This may allow remote computers to attach to the debug port and evaluate arbitrary JavaScript. The default interface is now localhost. It has always been possible to start the debugger on a specific interface, such as `node --debug=localhost`. The debugger was removed in Node.js 8 an
o start the debugger on a specific interface, such as `node --debug=localhost`. The debugger was removed in Node.js 8 and replaced with the inspector, so no versions from 8 and later are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ - http://www.securityfocus.com/bid/106040
CVE ID: CVE-2018-12121 State: PUBLISHED Published: 2018-11-28T17:00:00 Last Updated: 2024-12-27T16:02:58.114Z Vendors: The Node.js Project Products: Node.js Problem Types: CWE-400 Description: Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org
load balancer or other proxy layer. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ - http://www.securityfocus.com/bid/106043 - https://access.redhat.com/errata/RHSA-2019:1821 - https://access.redhat.com/errata/RHSA-2019:2258 - https://access.redhat.com/errata/RHSA-2019:3497 - https://security.gentoo.org/glsa/202003-48
CVE ID: CVE-2018-12122 State: PUBLISHED Published: 2018-11-28T17:00:00 Last Updated: 2024-12-13T13:09:20.260Z Vendors: The Node.js Project Products: Node.js Problem Types: CWE-400 Description: Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ - http://www.securityfocus.com/bid/106043 - https://access.redhat.com/errata/RHSA-2019:1
ovember-2018-security-releases/ - http://www.securityfocus.com/bid/106043 - https://access.redhat.com/errata/RHSA-2019:1821 - https://security.gentoo.org/glsa/202003-48
CVE ID: CVE-2018-12123 State: PUBLISHED Published: 2018-11-28T17:00:00 Last Updated: 2024-12-13T13:09:21.262Z Vendors: The Node.js Project Products: Node.js Problem Types: CWE-115 Description: Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by using a mixed case "javascript:" (e.g. "javAscript:") protocol (other protocols are not affected). If security decisions are made about the URL based on the hostname, they may be incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://nod
sed on the hostname, they may be incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ - https://access.redhat.com/errata/RHSA-2019:1821 - https://security.gentoo.org/glsa/202003-48
CVE ID: CVE-2018-12125 State: REJECTED Published: N/A Last Updated: 2023-02-27T00:00:00 Description: No description available.
CVE ID: CVE-2018-12126 State: PUBLISHED Published: 2019-05-30T15:36:05 Last Updated: 2024-08-05T08:30:57.443Z Vendors: Intel Corporation Products: Central ProcCVE-2018-12126essing Units (CPUs) Problem Types: Information Disclosure Description: Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf Additional Analyst Notes: - CVE Program
n/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html - https://www.synology.com/security/advisory/Synology_SA_19_24 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html - https://access.redhat.com/errata/RHSA-2019:1455 - https://usn.ubuntu.com/3977-3/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html - https://seclists.org/bugtraq/2019/Jun/28 -
977-3/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html - https://seclists.org/bugtraq/2019/Jun/28 - https://seclists.org/bugtraq/2019/Jun/36 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc - https://access.redhat.com/errata/RHSA-2019:2553 - https://kc.mcafee.com/corporate/index?page=cont
BSD-SA-19:07.mds.asc - https://access.redhat.com/errata/RHSA-2019:2553 - https://kc.mcafee.com/corporate/index?page=content&id=SB10292 - https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc - https://seclists.org/bugtraq/2019/Nov/16 - https://seclists.org/bugtraq/2019/Nov/15 - http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21 - https://security.gentoo.org/glsa/202003-56
CVE ID: CVE-2018-12127 State: PUBLISHED Published: 2019-05-30T15:38:38 Last Updated: 2024-08-05T08:30:57.404Z Vendors: Intel Corporation Products: Central Processing Units (CPUs) Problem Types: Information Disclosure Description: Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf Additional Analyst Notes: - CVE Program Container: Referenc