Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-5904 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T05:47:56.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while list traversal in LPM status driver for clean up, use after free vulnerability may occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=8e82c0d84ccee87309fd22f8208915f0ba502b26 - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=88b838c8952ec6414c72449ae15768d15d2606dd - https://www.codeaurora.org/security-bulletin/2018/
/kernel/msm-4.4/commit/?id=88b838c8952ec6414c72449ae15768d15d2606dd - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-5905 State: PUBLISHED Published: 2018-09-19T14:00:00 Last Updated: 2024-08-05T05:47:56.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a race condition while accessing num of clients in DIAG services can lead to out of boundary access. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=6eb2f4f6fde1b210712d6ac66b40b9e7684d77db - https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pix
rity-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin - https://source.android.com/security/bulletin/pixel/2018-08-01#qualcomm-components - http://support.blackberry.com/kb/articleDetail?articleNumber=000051163
CVE ID: CVE-2018-5906 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T05:47:56.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in debugfs module due to lack of check in size of input before copying into buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=ac40b7c7591476a8863b477ddc1c14c631f77256
CVE ID: CVE-2018-5907 State: PUBLISHED Published: 2018-07-06T19:00:00Z Last Updated: 2024-09-16T22:26:40.271Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Copy Without Checking Size of Input in Audio Description: Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components - https://www.vulnerabilitycent
ces: - https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components - https://www.vulnerabilitycenter.com/#%21vul=87341
CVE ID: CVE-2018-5908 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T05:47:56.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in display function due to lack of buffer length validation before copying. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=28e5918c60b832091c6b3618747258803cbd3302 - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=4689d03e5db548d263232c274bf307956207da27 - https://www.codeaurora.org/securi
urora.org/quic/la/kernel/msm-4.4/commit/?id=4689d03e5db548d263232c274bf307956207da27 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-5909 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T05:47:56.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow occur may occur in display handlers due to lack of checking in buffer size before copying into it and will lead to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=2c1716c5afd660651724b6088f2e6301272f4926 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bullet
2e6301272f4926 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-5910 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T05:47:56.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a memory corruption can occur in kernel due to improper check in callers count parameter in display handlers. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=b67e04e3696f05411b7434c8b194895d273b00c5 - https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=d9344c2f4b60cf5d4c747c11f3cb0b6f1558db78 - https://www.codeaurora.org/security
ora.org/quic/la/kernel/msm-4.4/commit/?id=d9344c2f4b60cf5d4c747c11f3cb0b6f1558db78 - https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin
CVE ID: CVE-2018-5911 State: PUBLISHED Published: 2019-06-14T17:02:10 Last Updated: 2024-08-05T05:47:56.183Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Problem Types: Possible Buffer Overflow in WLAN Description: Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 855, SDM630, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References:
0, SD 730, SD 820A, SD 855, SDM630, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-5912 State: PUBLISHED Published: 2018-11-28T15:00:00 Last Updated: 2024-08-05T05:47:56.184Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Buffer Overflow in Video Description: Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5913 State: PUBLISHED Published: 2019-06-14T17:02:10 Last Updated: 2024-08-05T05:47:56.177Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Problem Types: Cryptographic Issues in TrustZone Description: A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Indus
ompute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container:
X, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5914 State: PUBLISHED Published: 2018-10-26T13:00:00 Last Updated: 2024-08-05T05:47:56.099Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Validation of Array Index in TZ CORE Description: Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5915 State: PUBLISHED Published: 2019-01-18T22:00:00 Last Updated: 2024-08-05T05:47:56.117Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Reachable Assertion in MODEM IP Stack Description: Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletin
itional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/106128
CVE ID: CVE-2018-5916 State: PUBLISHED Published: 2018-11-28T15:00:00 Last Updated: 2024-08-05T05:47:56.188Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Information Exposure in MODEM Description: Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20,
0, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/105838
CVE ID: CVE-2018-5917 State: PUBLISHED Published: 2018-11-28T15:00:00 Last Updated: 2024-08-05T05:47:56.172Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Possible Buffer Overflow in DRM Description: Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - http://www.securityfocus.com/bid/105838
CVE ID: CVE-2018-5918 State: PUBLISHED Published: 2018-11-28T15:00:00 Last Updated: 2024-08-05T05:47:56.176Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Integer Overflow to Buffer Overflow in DRM Trusted Application Description: Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130. Addit
D 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-5919 State: PUBLISHED Published: 2018-11-27T18:00:00 Last Updated: 2024-08-05T05:47:56.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a use after free issue in WLAN host driver can lead to device reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=81a80c9973833f7cd93dc83ce0f23572dd81befe
CVE ID: CVE-2018-5921 State: PUBLISHED Published: 2018-10-03T20:00:00Z Last Updated: 2024-09-17T02:12:06.090Z Vendors: HP Inc. Products: Certain HP Enterprise Printers, HP PageWide Printers, and MFP Products Problem Types: Cross Site Request Forgery Description: A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/c05949322
CVE ID: CVE-2018-5923 State: PUBLISHED Published: 2019-03-27T15:15:06 Last Updated: 2024-08-05T05:47:56.163Z Vendors: HP Products: HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers Problem Types: Execution of arbitrary code. Description: In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/c06169434
CVE ID: CVE-2018-5924 State: PUBLISHED Published: 2018-08-13T15:00:00Z Last Updated: 2024-09-16T19:35:02.136Z Vendors: HP Inc. Products: HP inkjet printers Problem Types: Remote code execution Description: A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105010 - http://www.securitytracker.com/id/1041415 - https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/ - https://support.hp.com/us-en/document/c06097712
CVE ID: CVE-2018-5925 State: PUBLISHED Published: 2018-08-13T15:00:00Z Last Updated: 2024-09-17T01:25:42.380Z Vendors: HP Inc. Products: HP inkjet printers Problem Types: Remote code execution Description: A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105010 - http://www.securitytracker.com/id/1041415 - https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/ - https://support.hp.com/us-en/document/c06097712
CVE ID: CVE-2018-5926 State: PUBLISHED Published: 2019-03-27T15:23:26 Last Updated: 2024-08-05T05:47:56.123Z Vendors: HP Products: HP Remote Graphics Software Problem Types: Information disclosure. Description: A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/c06201418
CVE ID: CVE-2018-5927 State: PUBLISHED Published: 2019-03-27T15:39:54 Last Updated: 2024-08-05T05:47:56.121Z Vendors: HP Products: HP Support Assistant Problem Types: Local code execution. Description: HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/c06242762
CVE ID: CVE-2018-5950 State: PUBLISHED Published: 2018-01-23T16:00:00 Last Updated: 2024-08-05T05:47:56.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104594 - https://access.redhat.com/errata/RHSA-2018:0504 - https://usn.ubuntu.com/3563-1/ - https://www.mail-archive.com/mailman-users%40python.org/msg70375.html - https://www.debian.org/security/2018/dsa-4108 - https://access.redhat.com/errata/RHSA-2018:0505 - https
/msg70375.html - https://www.debian.org/security/2018/dsa-4108 - https://access.redhat.com/errata/RHSA-2018:0505 - https://bugs.launchpad.net/mailman/+bug/1747209 - https://lists.debian.org/debian-lts-announce/2018/02/msg00007.html - http://packetstormsecurity.com/files/159761/Mailman-2.1.23-Cross-Site-Scripting.html
CVE ID: CVE-2018-5951 State: PUBLISHED Published: 2020-03-02T21:20:27 Last Updated: 2024-08-05T05:47:56.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Nat-Lab/CVE-2018-5951
CVE ID: CVE-2018-5953 State: PUBLISHED Published: 2018-08-07T18:00:00 Last Updated: 2024-08-05T05:47:56.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The swiotlb_print_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/johnsonwangqize/cve-linux/blob/master/%20CVE-2018-5953.md - http://www.securityfocus.com/bid/105045 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - http
rg/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7d63fb3af87aa67aa7d24466e792f9d7c57d8e79
CVE ID: CVE-2018-5954 State: PUBLISHED Published: 2018-01-25T16:00:00 Last Updated: 2024-08-05T05:47:56.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43852/ - http://packetstormsecurity.com/files/146037/PHPFreeChat-1.7-Denial-Of-Service.html
CVE ID: CVE-2018-5955 State: PUBLISHED Published: 2018-01-21T22:00:00 Last Updated: 2024-08-05T05:47:56.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3557 - https://www.exploit-db.com/exploits/44356/
CVE ID: CVE-2018-5956 State: PUBLISHED Published: 2018-01-21T22:00:00 Last Updated: 2024-08-05T05:47:56.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402414. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/ZillyaAntivirus_POC/tree/master/0x9C402414
CVE ID: CVE-2018-5957 State: PUBLISHED Published: 2018-01-21T22:00:00 Last Updated: 2024-08-05T05:47:56.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40242C. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/ZillyaAntivirus_POC/tree/master/0x9C40242C
CVE ID: CVE-2018-5958 State: PUBLISHED Published: 2018-01-21T22:00:00 Last Updated: 2024-08-05T05:47:56.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402424. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/ZillyaAntivirus_POC/tree/master/0x9C402424
CVE ID: CVE-2018-5960 State: PUBLISHED Published: 2018-01-22T01:00:00 Last Updated: 2024-08-05T05:47:56.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2043
CVE ID: CVE-2018-5961 State: PUBLISHED Published: 2018-01-22T01:00:00 Last Updated: 2024-08-05T05:47:56.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the `module` value of the `index.php` file. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1835
CVE ID: CVE-2018-5962 State: PUBLISHED Published: 2018-01-22T01:00:00 Last Updated: 2024-08-05T05:47:56.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpini_editor module or the email_address parameter to the mail_add-new module. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1836