Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-13914 State: PUBLISHED Published: 2019-02-25T23:00:00 Last Updated: 2024-08-05T09:14:47.217Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Buffer Copy Without Checking Size of Input in OS Description: Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 636, SD 820A, SD 835, SDM630, SDM660, SDX20. Additional Analyst No
DM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 636, SD 820A, SD 835, SDM630, SDM660, SDX20. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-13915 State: REJECTED Published: 2021-11-23T19:59:13 Last Updated: 2021-11-23T19:59:13 Description: No description available.
CVE ID: CVE-2018-13916 State: PUBLISHED Published: 2019-11-21T14:38:21 Last Updated: 2024-08-05T09:14:47.229Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Problem Types: Improper Validation of Array Index in Kernel Description: Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi
fier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM43
96AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin
CVE ID: CVE-2018-13918 State: PUBLISHED Published: 2019-04-04T15:09:49 Last Updated: 2024-08-05T09:21:40.858Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Problem Types: Buffer Copy Without Checking Size of Input vulnerability in PMIC Modules Description: kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, S
napdragon Mobile, Snapdragon Wearables, in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDX24, SM7150 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-13919 State: PUBLISHED Published: 2019-06-14T17:02:10 Last Updated: 2024-08-05T09:21:40.904Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Use-After-Free issue in IPA Driver Description: Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909
r IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS405, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/05/06/may-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-13920 State: PUBLISHED Published: 2019-05-24T16:44:16 Last Updated: 2024-08-05T09:21:40.699Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Use-After-Free Issue in Kernel Description: Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 8
Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, SDX24 Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE ID: CVE-2018-13921 State: REJECTED Published: 2021-11-23T19:59:14 Last Updated: 2021-11-23T19:59:14 Description: No description available.
CVE ID: CVE-2018-13922 State: REJECTED Published: 2021-11-23T19:59:15 Last Updated: 2021-11-23T19:59:15 Description: No description available.
CVE ID: CVE-2018-13923 State: REJECTED Published: 2021-11-23T19:59:16 Last Updated: 2021-11-23T19:59:16 Description: No description available.
CVE ID: CVE-2018-13924 State: PUBLISHED Published: 2019-07-22T13:47:45 Last Updated: 2024-08-05T09:21:40.734Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Problem Types: Stack Based Buffer Overflow in Multi Mode Call Processor Description: Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, S
erflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA6174A, QCA8081, QCS404, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM4
SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-13925 State: PUBLISHED Published: 2019-05-24T16:44:16 Last Updated: 2024-08-05T09:21:40.732Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables Problem Types: Use-After-Free issue in Video Description: Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wear
gon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13925
CVE ID: CVE-2018-13926 State: REJECTED Published: 2021-11-23T19:59:16 Last Updated: 2021-11-23T19:59:16 Description: No description available.
CVE ID: CVE-2018-13927 State: PUBLISHED Published: 2019-07-22T13:47:45 Last Updated: 2024-08-05T09:21:40.657Z Vendors: Qualcomm, Inc. Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Problem Types: Improper Authentication in Core Description: Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,
to, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS404, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130 Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2018-13928 State: REJECTED Published: 2021-11-23T19:59:17 Last Updated: 2021-11-23T19:59:17 Description: No description available.
CVE ID: CVE-2018-13929 State: REJECTED Published: 2021-11-23T19:59:18 Last Updated: 2021-11-23T19:59:18 Description: No description available.
CVE ID: CVE-2018-13930 State: REJECTED Published: 2021-11-23T19:59:19 Last Updated: 2021-11-23T19:59:19 Description: No description available.
CVE ID: CVE-2018-13931 State: REJECTED Published: 2021-11-23T19:59:19 Last Updated: 2021-11-23T19:59:19 Description: No description available.
CVE ID: CVE-2018-13932 State: REJECTED Published: 2021-11-23T19:59:20 Last Updated: 2021-11-23T19:59:20 Description: No description available.
CVE ID: CVE-2018-13933 State: REJECTED Published: 2021-11-23T19:59:21 Last Updated: 2021-11-23T19:59:21 Description: No description available.
CVE ID: CVE-2018-13934 State: REJECTED Published: 2021-11-23T19:59:21 Last Updated: 2021-11-23T19:59:21 Description: No description available.
CVE ID: CVE-2018-13935 State: REJECTED Published: 2021-11-23T19:59:22 Last Updated: 2021-11-23T19:59:22 Description: No description available.
CVE ID: CVE-2018-13936 State: REJECTED Published: 2021-11-23T19:59:23 Last Updated: 2021-11-23T19:59:23 Description: No description available.
CVE ID: CVE-2018-13937 State: REJECTED Published: 2021-11-23T19:59:24 Last Updated: 2021-11-23T19:59:24 Description: No description available.
CVE ID: CVE-2018-13938 State: REJECTED Published: 2021-11-23T19:59:24 Last Updated: 2021-11-23T19:59:24 Description: No description available.
CVE ID: CVE-2018-13939 State: REJECTED Published: 2021-11-23T19:59:25 Last Updated: 2021-11-23T19:59:25 Description: No description available.
CVE ID: CVE-2018-13940 State: REJECTED Published: 2021-11-23T19:59:26 Last Updated: 2021-11-23T19:59:26 Description: No description available.
CVE ID: CVE-2018-13941 State: REJECTED Published: 2021-11-23T19:59:27 Last Updated: 2021-11-23T19:59:27 Description: No description available.
CVE ID: CVE-2018-13942 State: REJECTED Published: 2021-11-23T19:59:27 Last Updated: 2021-11-23T19:59:27 Description: No description available.
CVE ID: CVE-2018-13943 State: REJECTED Published: 2021-11-23T19:59:28 Last Updated: 2021-11-23T19:59:28 Description: No description available.
CVE ID: CVE-2018-13944 State: REJECTED Published: 2021-11-23T19:59:29 Last Updated: 2021-11-23T19:59:29 Description: No description available.
CVE ID: CVE-2018-13945 State: REJECTED Published: 2021-11-23T19:59:30 Last Updated: 2021-11-23T19:59:30 Description: No description available.
CVE ID: CVE-2018-13946 State: REJECTED Published: 2021-11-23T19:59:30 Last Updated: 2021-11-23T19:59:30 Description: No description available.
CVE ID: CVE-2018-13947 State: REJECTED Published: 2021-11-23T19:59:31 Last Updated: 2021-11-23T19:59:31 Description: No description available.
CVE ID: CVE-2018-13948 State: REJECTED Published: 2021-11-23T19:59:32 Last Updated: 2021-11-23T19:59:32 Description: No description available.
CVE ID: CVE-2018-13949 State: REJECTED Published: 2021-11-23T19:59:33 Last Updated: 2021-11-23T19:59:33 Description: No description available.
CVE ID: CVE-2018-13950 State: REJECTED Published: 2021-11-23T19:59:33 Last Updated: 2021-11-23T19:59:33 Description: No description available.
CVE ID: CVE-2018-13951 State: REJECTED Published: 2021-11-23T19:59:34 Last Updated: 2021-11-23T19:59:34 Description: No description available.
CVE ID: CVE-2018-13952 State: REJECTED Published: 2021-11-23T19:59:35 Last Updated: 2021-11-23T19:59:35 Description: No description available.
CVE ID: CVE-2018-13953 State: REJECTED Published: 2021-11-23T19:59:35 Last Updated: 2021-11-23T19:59:35 Description: No description available.
CVE ID: CVE-2018-13954 State: REJECTED Published: 2021-11-23T19:59:36 Last Updated: 2021-11-23T19:59:36 Description: No description available.
CVE ID: CVE-2018-13955 State: REJECTED Published: 2021-11-23T19:59:37 Last Updated: 2021-11-23T19:59:37 Description: No description available.
CVE ID: CVE-2018-13956 State: REJECTED Published: 2021-11-23T19:59:38 Last Updated: 2021-11-23T19:59:38 Description: No description available.
CVE ID: CVE-2018-13957 State: REJECTED Published: 2021-11-23T19:59:38 Last Updated: 2021-11-23T19:59:38 Description: No description available.
CVE ID: CVE-2018-13958 State: REJECTED Published: 2021-11-23T19:59:39 Last Updated: 2021-11-23T19:59:39 Description: No description available.
CVE ID: CVE-2018-13959 State: REJECTED Published: 2021-11-23T19:59:40 Last Updated: 2021-11-23T19:59:40 Description: No description available.
CVE ID: CVE-2018-13960 State: REJECTED Published: 2021-11-23T19:59:41 Last Updated: 2021-11-23T19:59:41 Description: No description available.
CVE ID: CVE-2018-13961 State: REJECTED Published: 2021-11-23T19:59:41 Last Updated: 2021-11-23T19:59:41 Description: No description available.
CVE ID: CVE-2018-13962 State: REJECTED Published: 2021-11-23T19:59:42 Last Updated: 2021-11-23T19:59:42 Description: No description available.
CVE ID: CVE-2018-13963 State: REJECTED Published: 2021-11-23T19:59:43 Last Updated: 2021-11-23T19:59:43 Description: No description available.
CVE ID: CVE-2018-13964 State: REJECTED Published: 2021-11-23T19:59:44 Last Updated: 2021-11-23T19:59:44 Description: No description available.
CVE ID: CVE-2018-13965 State: REJECTED Published: 2021-11-23T19:59:44 Last Updated: 2021-11-23T19:59:44 Description: No description available.
CVE ID: CVE-2018-13966 State: REJECTED Published: 2021-11-23T19:59:45 Last Updated: 2021-11-23T19:59:45 Description: No description available.
CVE ID: CVE-2018-13967 State: REJECTED Published: 2021-11-23T19:59:46 Last Updated: 2021-11-23T19:59:46 Description: No description available.
CVE ID: CVE-2018-13968 State: REJECTED Published: 2021-11-23T19:59:47 Last Updated: 2021-11-23T19:59:47 Description: No description available.
CVE ID: CVE-2018-13969 State: REJECTED Published: 2021-11-23T19:59:48 Last Updated: 2021-11-23T19:59:48 Description: No description available.
CVE ID: CVE-2018-13970 State: REJECTED Published: 2021-12-20T22:43:19 Last Updated: 2021-12-20T22:43:19 Description: No description available.
CVE ID: CVE-2018-13971 State: REJECTED Published: 2021-12-20T22:43:20 Last Updated: 2021-12-20T22:43:20 Description: No description available.
CVE ID: CVE-2018-13972 State: REJECTED Published: 2021-12-20T22:43:20 Last Updated: 2021-12-20T22:43:20 Description: No description available.
CVE ID: CVE-2018-13973 State: REJECTED Published: 2021-12-20T22:43:21 Last Updated: 2021-12-20T22:43:21 Description: No description available.
CVE ID: CVE-2018-13974 State: REJECTED Published: 2021-12-20T22:43:22 Last Updated: 2021-12-20T22:43:22 Description: No description available.
CVE ID: CVE-2018-13975 State: REJECTED Published: 2021-12-20T22:43:23 Last Updated: 2021-12-20T22:43:23 Description: No description available.
CVE ID: CVE-2018-13976 State: REJECTED Published: 2021-12-20T22:43:23 Last Updated: 2021-12-20T22:43:23 Description: No description available.
CVE ID: CVE-2018-13977 State: REJECTED Published: 2021-12-20T22:43:24 Last Updated: 2021-12-20T22:43:24 Description: No description available.
CVE ID: CVE-2018-13978 State: REJECTED Published: 2021-12-20T22:43:25 Last Updated: 2021-12-20T22:43:25 Description: No description available.
CVE ID: CVE-2018-13979 State: REJECTED Published: 2021-12-20T22:43:26 Last Updated: 2021-12-20T22:43:26 Description: No description available.
CVE ID: CVE-2018-13980 State: PUBLISHED Published: 2018-07-16T14:00:00 Last Updated: 2024-08-05T09:21:40.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/148537/Zeta-Producer-Desktop-CMS-14.2.0-Code-Execution-File-Disclosure.html - https://www.sec-consult.com/en/blog/advisories/remote-code-execution-local-file-disclosure-zeta-prod
e-Disclosure.html - https://www.sec-consult.com/en/blog/advisories/remote-code-execution-local-file-disclosure-zeta-producer-desktop-cms/ - https://www.exploit-db.com/exploits/45016/
CVE ID: CVE-2018-13981 State: PUBLISHED Published: 2018-07-16T14:00:00 Last Updated: 2024-08-05T09:21:40.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files, because the formmailer widget blocks .php files but not .php5 or .phtml files. This is related to /assets/php/formmailer/SendEmail.php and /assets/php/formmailer/functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/148537/Zeta-Producer-Desktop-CMS-14.2.0-Code-Execut
rogram Container: References: - http://packetstormsecurity.com/files/148537/Zeta-Producer-Desktop-CMS-14.2.0-Code-Execution-File-Disclosure.html - https://www.sec-consult.com/en/blog/advisories/remote-code-execution-local-file-disclosure-zeta-producer-desktop-cms/ - https://www.exploit-db.com/exploits/45016/
CVE ID: CVE-2018-13982 State: PUBLISHED Published: 2018-09-18T21:00:00 Last Updated: 2024-08-05T09:21:40.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smarty-php/smarty/commit/2e081a51b1effddb23f87952959139ac62654d50 - https://github.com/smarty-php/smarty/commit/f9ca3c63d1250bb56b2bda609dcc9dd81f0065f8
1b1effddb23f87952959139ac62654d50 - https://github.com/smarty-php/smarty/commit/f9ca3c63d1250bb56b2bda609dcc9dd81f0065f8 - https://github.com/smarty-php/smarty/commit/c9dbe1d08c081912d02bd851d1d1b6388f6133d1 - https://github.com/smarty-php/smarty/commit/8d21f38dc35c4cd6b31c2f23fc9b8e5adbc56dfe - https://github.com/smarty-php/smarty/commit/bcedfd6b58bed4a7366336979ebaa5a240581531 - https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180420-01_Smarty_Path_Traversal - https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html - https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html - https://lists.debian.org/debian-lts-announce/2021/10/msg00015.html
CVE ID: CVE-2018-13983 State: PUBLISHED Published: 2019-05-06T18:20:01 Last Updated: 2024-08-05T09:21:40.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150990/ImpressCMS-1.3.10-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2019/Jan/8 - https://www.netsparker.com/web-applications-advisories/ns-18-033-cross-site-scripting-in-impresscms/
CVE ID: CVE-2018-13988 State: PUBLISHED Published: 2018-07-25T23:00:00 Last Updated: 2024-08-05T09:21:40.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1602838 - https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html - https://bugzilla.novell.com/show_bug.cgi
=1602838 - https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html - https://bugzilla.novell.com/show_bug.cgi?id=CVE-2018-13988 - https://access.redhat.com/errata/RHSA-2018:3505 - https://access.redhat.com/errata/RHSA-2018:3140 - https://cgit.freedesktop.org/poppler/poppler/commit/?id=004e3c10df0abda214f0c293f9e269fdd979c5ee - http://packetstormsecurity.com/files/148661/PDFunite-0.62.0-Buffer-Overflow.html - https://usn.ubuntu.com/3757-1/ - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2018-13989 State: PUBLISHED Published: 2018-07-11T16:00:00 Last Updated: 2024-08-05T09:21:40.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=H7WYTkgtwsY - https://packetstormsecurity.com/files/148453/Grundig-Smart-Inter-ctive-3.0-Insecure-Direct-Object-Reference.html - https://www.exploit-db.com/exploits/45022/