Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-12641 State: PUBLISHED Published: 2018-06-22T12:00:00 Last Updated: 2024-08-05T08:38:06.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23058 - https://bugs.launchpa
es: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23058 - https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763099 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85452 - https://security.gentoo.org/glsa/201908-01 - https://access.redhat.com/errata/RHSA-2019:2075 - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-12642 State: PUBLISHED Published: 2018-06-22T12:00:00Z Last Updated: 2024-09-16T20:13:10.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Froxlor/Froxlor/commit/aa881560cc996c38cbf8c20ee62854e27f72c73c
CVE ID: CVE-2018-12648 State: PUBLISHED Published: 2018-06-22T13:00:00 Last Updated: 2024-08-05T08:38:06.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=106981 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00070.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00075.html
CVE ID: CVE-2018-12649 State: PUBLISHED Published: 2018-06-22T14:00:00 Last Updated: 2024-08-05T08:38:06.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/6ffacc1e239930e0e8464d0ca16e432e26cf36a9
CVE ID: CVE-2018-12650 State: PUBLISHED Published: 2018-10-24T21:00:00 Last Updated: 2024-08-05T08:38:06.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adrenalin HRMS version 5.4.0 contains a Reflected Cross Site Scripting (XSS) vulnerability in the ApplicationtEmployeeSearch page via 'prntDDLCntrlName' and 'prntFrmName'. Additional Analyst Notes: - CVE Program Container: References: - https://www.knowcybersec.com/2018/10/CVE-2018-12650-reflected-XSS.html - http://packetstormsecurity.com/files/155232/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
CVE ID: CVE-2018-12651 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T08:38:06.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the ShiftEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.knowcybersec.com/2018/12/CVE-2018-12651-reflected-XSS.html
CVE ID: CVE-2018-12652 State: PUBLISHED Published: 2019-03-25T18:26:01 Last Updated: 2024-08-05T08:38:06.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the LeaveEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.knowcybersec.com/2019/02/CVE-2018-12652-reflected-XSS.html
CVE ID: CVE-2018-12653 State: PUBLISHED Published: 2019-03-25T18:29:15 Last Updated: 2024-08-05T08:38:06.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.knowcybersec.com/2019/02/CVE-2018-12653-reflected-XSS.html - http://packetstormsecurity.com/files/155244/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
CVE ID: CVE-2018-12654 State: PUBLISHED Published: 2018-06-22T15:00:00 Last Updated: 2024-08-05T08:38:06.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) exists in the Bibliography module in SLiMS 8 Akasia 8.3.1 via an admin/modules/bibliography/index.php?keywords= URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims8_akasia/issues/98
CVE ID: CVE-2018-12655 State: PUBLISHED Published: 2018-06-22T15:00:00 Last Updated: 2024-08-05T08:38:06.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) exists in the Circulation module in SLiMS 8 Akasia 8.3.1 via an admin/modules/circulation/loan_rules.php?keywords= URI, a related issue to CVE-2017-7242. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims8_akasia/issues/99
CVE ID: CVE-2018-12656 State: PUBLISHED Published: 2018-06-22T15:00:00 Last Updated: 2024-08-05T08:38:06.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modules/membership/index.php?keywords= URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims8_akasia/issues/100
CVE ID: CVE-2018-12657 State: PUBLISHED Published: 2018-06-22T15:00:00 Last Updated: 2024-08-05T08:38:06.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) exists in the Master File module in SLiMS 8 Akasia 8.3.1 via an admin/modules/master_file/rda_cmc.php?keywords= URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims8_akasia/issues/101
CVE ID: CVE-2018-12658 State: PUBLISHED Published: 2018-06-22T15:00:00 Last Updated: 2024-08-05T08:38:06.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stock_take/index.php?keywords= URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims8_akasia/issues/102
CVE ID: CVE-2018-12659 State: PUBLISHED Published: 2018-06-22T15:00:00 Last Updated: 2024-08-05T08:38:06.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting the csrf_token parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims8_akasia/issues/103
CVE ID: CVE-2018-12666 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:38:06.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cookies, which allow remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12667 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:38:06.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vulnerability that allows requests to be made to back-end CGI scripts without a valid session. This vulnerability could be used to read and modify the configuration. The vulnerability affects all versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12668 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:38:06.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12669 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:38:06.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset arbitrary accounts via a request to web/cgi-bin/hi3510/param.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12670 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:38:06.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12671 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:38:06.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including all password sets set within the camera. This information can then be used to gain access to the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12672 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:38:06.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B) does not perform proper validation on user-supplied input and is vulnerable to cross-site scripting attacks. If proper authorization was implemented, this vulnerability could be leveraged to perform actions on behalf of another user or the administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12673 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:45:00.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including camera hardware, wireless network, and local area network information. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12674 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:45:00.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) stores the username and password within the cookies of a session. If an attacker gained access to these session cookies, it would be possible to gain access to the username and password of the logged-in account. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12675 State: PUBLISHED Published: 2018-10-19T22:00:00 Last Updated: 2024-08-05T08:45:00.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) does not perform origin checks on URLs that the camera's web interface redirects a user to. This can be leveraged to send a user to an unexpected endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE ID: CVE-2018-12678 State: PUBLISHED Published: 2018-06-22T18:00:00Z Last Updated: 2024-09-17T00:21:48.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an unvalidated id query parameter for the /websocket/exec endpoint, which allows remote attackers to bypass intended access restrictions or conduct SSRF attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/portainer/portainer/pull/1979 - https://github.com/portainer/portainer/releases/tag/1.18.0
CVE ID: CVE-2018-12679 State: PUBLISHED Published: 2019-04-02T18:58:26 Last Updated: 2024-08-05T08:45:00.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Tanganelli/CoAPthon3/issues/16
CVE ID: CVE-2018-12680 State: PUBLISHED Published: 2019-04-02T19:03:00 Last Updated: 2024-08-05T08:45:02.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client) when they receive crafted CoAP messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Tanganelli/CoAPthon/issues/135
CVE ID: CVE-2018-12684 State: PUBLISHED Published: 2018-06-22T19:00:00Z Last Updated: 2024-09-17T01:20:45.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/civetweb/civetweb/issues/633 - https://github.com/civetweb/civetweb/commit/8fd069f6dedb064339f1091069ac96f3f8bdb552
CVE ID: CVE-2018-12687 State: PUBLISHED Published: 2018-06-22T19:00:00Z Last Updated: 2024-09-16T22:52:05.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syoyo/tinyexr/issues/84
CVE ID: CVE-2018-12688 State: PUBLISHED Published: 2018-06-22T19:00:00Z Last Updated: 2024-09-16T22:55:35.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyexr 0.9.5 has a segmentation fault in the wav2Decode function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syoyo/tinyexr/issues/83
CVE ID: CVE-2018-12689 State: PUBLISHED Published: 2018-06-22T20:00:00Z Last Updated: 2024-09-16T16:47:46.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a crafted username and password in the login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44926/
CVE ID: CVE-2018-12691 State: PUBLISHED Published: 2018-07-05T18:00:00 Last Updated: 2024-08-05T08:45:00.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier allows attackers to bypass network access control via data plane packet injection. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.onosproject.org/#/c/18867/ - https://wiki.onosproject.org/display/ONOS/Security+advisories
CVE ID: CVE-2018-12692 State: PUBLISHED Published: 2018-06-23T18:00:00Z Last Updated: 2024-09-16T16:18:35.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wps_setup_pin parameter to /data/wps.setup.json. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44912/ - https://medium.com/advisability/the-in-security-of-the-tp-link-technologies-tl-wa850re-wi-fi-range-extender-26db87a7a0cc
CVE ID: CVE-2018-12693 State: PUBLISHED Published: 2018-06-23T18:00:00Z Last Updated: 2024-09-17T03:07:28.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service (outage) via a long type parameter to /data/syslog.filter.json. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/advisability/the-in-security-of-the-tp-link-technologies-tl-wa850re-wi-fi-range-extender-26db87a7a0cc
CVE ID: CVE-2018-12694 State: PUBLISHED Published: 2018-06-23T18:00:00Z Last Updated: 2024-09-16T20:12:31.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (reboot) via data/reboot.json. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/advisability/the-in-security-of-the-tp-link-technologies-tl-wa850re-wi-fi-range-extender-26db87a7a0cc
CVE ID: CVE-2018-12695 State: PUBLISHED Published: 2018-06-23T18:00:00 Last Updated: 2024-08-05T08:45:01.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: mao10cms 6 allows XSS via the m=bbs&a=index page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsmaomao/mao10cms/issues/2 - https://github.com/chenrui1896/mao10cms_xss/wiki/The-xss-vulnerability-of-mao10cms
CVE ID: CVE-2018-12696 State: PUBLISHED Published: 2018-06-23T18:00:00 Last Updated: 2024-08-05T08:45:01.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: mao10cms 6 allows XSS via the article page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nsmaomao/mao10cms/issues/3 - https://github.com/chenrui1896/mao10cms_xss/wiki/The-xss-vulnerability-of-mao10cms
CVE ID: CVE-2018-12697 State: PUBLISHED Published: 2018-06-23T22:00:00 Last Updated: 2024-08-05T08:45:01.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102 - https://sourceware.org/bugzilla/show_bug.cgi?id=23057 - http://www.securityfocus.com/bid/104538 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 - https://security.gent
7 - http://www.securityfocus.com/bid/104538 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 - https://security.gentoo.org/glsa/201908-01 - https://access.redhat.com/errata/RHSA-2019:2075 - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-12698 State: PUBLISHED Published: 2018-06-23T22:00:00 Last Updated: 2024-08-05T08:45:02.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102 - https://sourceware.org/bugzilla/show_bug.cgi?id=23057 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 - http://ww
- https://sourceware.org/bugzilla/show_bug.cgi?id=23057 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 - http://www.securityfocus.com/bid/104539 - https://security.gentoo.org/glsa/201908-01 - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-12699 State: PUBLISHED Published: 2018-06-23T22:00:00 Last Updated: 2024-08-05T08:45:01.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102 - https://sourceware.org/bugzilla/show_bug.cgi?id=23057 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 - http://www.securityfocus.com/bi
rg/bugzilla/show_bug.cgi?id=23057 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 - http://www.securityfocus.com/bid/104540 - https://security.gentoo.org/glsa/201908-01 - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-12700 State: REJECTED Published: 2018-06-23T22:00:00 Last Updated: 2021-12-27T18:25:00 Description: No description available.
CVE ID: CVE-2018-12702 State: PUBLISHED Published: 2018-06-25T10:00:00 Last Updated: 2024-08-05T08:45:02.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://huobiglobal.zend
hanism of such vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://huobiglobal.zendesk.com/hc/en-us/articles/360000110521-HADAX-Suspends-18T-and-GVE-Deposits-and-Withdrawals - https://peckshield.com/2018/06/23/evilReflex/