Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-13233 State: PUBLISHED Published: 2018-07-05T02:00:00 Last Updated: 2024-08-05T09:00:34.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sell function of a smart contract implementation for GSI, an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BlockChainsSecurity/EtherTokens/tree/master/GSI - https://github.com/BlockChainsSecurity/EtherTokens/blob/master/ETHEREUMBLACK/sell%20integer%20overflow.md
CVE ID: CVE-2018-13250 State: PUBLISHED Published: 2018-07-05T14:00:00 Last Updated: 2024-08-05T09:00:34.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/147
CVE ID: CVE-2018-13251 State: PUBLISHED Published: 2018-07-05T14:00:00 Last Updated: 2024-08-05T09:00:34.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/149
CVE ID: CVE-2018-13252 State: PUBLISHED Published: 2018-07-05T17:00:00 Last Updated: 2024-08-05T09:00:33.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/herwonowr/CVE/tree/master/CVE-2018-13252
CVE ID: CVE-2018-13256 State: PUBLISHED Published: 2018-07-09T12:00:00 Last Updated: 2024-08-05T09:00:34.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45125/ - https://gkaim.com/cve-2018-13256-vikas-chaudhary/
CVE ID: CVE-2018-13257 State: PUBLISHED Published: 2019-11-18T15:32:42 Last Updated: 2024-08-05T09:00:34.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service (CAS) service ticket validation, enabling a phishing attack from the CAS server login page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gluxon/CVE-2018-13257
CVE ID: CVE-2018-13258 State: PUBLISHED Published: 2018-10-04T20:00:00Z Last Updated: 2024-09-16T23:21:06.293Z Vendors: mediawiki Products: mediawiki Problem Types: missing .htaccess files in release tarball used to protect directories that shouldn't be web accessible. Description: Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html - http://www.securitytracker.com/id/1041695 - https://phabricator.wikimedia.org/T199029
CVE ID: CVE-2018-13259 State: PUBLISHED Published: 2018-09-05T07:00:00 Last Updated: 2024-08-05T09:00:34.510Z Vendors: n/a Products: zsh before 5.6 Problem Types: improper parsing Description: An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/908000 - https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233d - https://www.zsh.org/mla/zsh-announce/136 - https://usn.ubuntu.com/3764-1/ - https://security.gentoo.org/glsa/201903-02 - https://acces
h.org/mla/zsh-announce/136 - https://usn.ubuntu.com/3764-1/ - https://security.gentoo.org/glsa/201903-02 - https://access.redhat.com/errata/RHSA-2019:2017 - https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
CVE ID: CVE-2018-13260 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13261 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13262 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13263 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13264 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13265 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13266 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13267 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13268 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13269 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13270 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13271 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13272 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13273 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13274 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13275 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13276 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13277 State: REJECTED Published: 2019-01-07T18:00:00 Last Updated: 2019-01-07T17:57:01 Description: No description available.
CVE ID: CVE-2018-13280 State: PUBLISHED Published: 2018-07-30T12:00:00Z Last Updated: 2024-09-16T19:40:37.024Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-330 Description: Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_39
CVE ID: CVE-2018-13281 State: PUBLISHED Published: 2018-10-31T16:00:00Z Last Updated: 2024-09-16T23:56:58.076Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-200 Description: Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_36
CVE ID: CVE-2018-13282 State: PUBLISHED Published: 2018-10-31T16:00:00Z Last Updated: 2024-09-16T20:07:10.099Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Synology Products: Photo Station Problem Types: CWE-384 Description: Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_18_37
CVE ID: CVE-2018-13283 State: PUBLISHED Published: 2019-04-01T14:25:46.642947Z Last Updated: 2024-09-16T18:13:04.579Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Synology Products: SSL VPN Client Problem Types: CWE-671 Description: Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the (1) command, (2) hostname, or (3) port parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_30
CVE ID: CVE-2018-13284 State: PUBLISHED Published: 2019-04-01T14:26:30.018716Z Last Updated: 2024-09-16T17:27:55.851Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-78 Description: Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_33
CVE ID: CVE-2018-13285 State: PUBLISHED Published: 2019-04-01T14:26:58.107465Z Last Updated: 2024-09-17T01:46:19.313Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-78 Description: Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_34
CVE ID: CVE-2018-13286 State: PUBLISHED Published: 2019-04-01T14:26:30.087186Z Last Updated: 2024-09-17T01:01:06.009Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-276 Description: Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_33
CVE ID: CVE-2018-13287 State: PUBLISHED Published: 2019-04-01T14:26:58.147334Z Last Updated: 2024-09-16T20:17:15.528Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-276 Description: Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_34
CVE ID: CVE-2018-13288 State: PUBLISHED Published: 2019-04-01T14:27:25.734372Z Last Updated: 2024-09-17T00:07:02.059Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: File Station Problem Types: CWE-200 Description: Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_35
CVE ID: CVE-2018-13289 State: PUBLISHED Published: 2019-04-01T14:28:24.612444Z Last Updated: 2024-09-16T23:01:29.488Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-200 Description: Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_48
CVE ID: CVE-2018-13290 State: PUBLISHED Published: 2019-04-01T14:28:24.662428Z Last Updated: 2024-09-17T02:01:20.445Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-200 Description: Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or obtain sensitive information of files via the file_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_48
CVE ID: CVE-2018-13291 State: PUBLISHED Published: 2019-04-01T14:28:46.507186Z Last Updated: 2024-09-16T19:41:42.185Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-200 Description: Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to obtain sensitive information via the world readable configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_51
CVE ID: CVE-2018-13292 State: PUBLISHED Published: 2019-04-01T14:28:24.699997Z Last Updated: 2024-09-16T18:48:51.190Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-200 Description: Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_48
CVE ID: CVE-2018-13293 State: PUBLISHED Published: 2019-04-01T14:28:46.543107Z Last Updated: 2024-09-17T02:21:57.045Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_51
CVE ID: CVE-2018-13294 State: PUBLISHED Published: 2019-04-01T14:29:32.386091Z Last Updated: 2024-09-16T17:47:42.193Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Application Service Problem Types: CWE-200 Description: Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_40
CVE ID: CVE-2018-13295 State: PUBLISHED Published: 2019-04-01T14:29:32.442339Z Last Updated: 2024-09-16T18:24:31.925Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Application Service Problem Types: CWE-200 Description: Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_40
CVE ID: CVE-2018-13296 State: PUBLISHED Published: 2019-04-01T14:29:55.085301Z Last Updated: 2024-09-16T19:56:41.748Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Synology Products: MailPlus Server Problem Types: CWE-400 Description: Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated renegotiation. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_43
CVE ID: CVE-2018-13297 State: PUBLISHED Published: 2019-04-01T14:30:30.257037Z Last Updated: 2024-09-16T22:20:28.678Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Drive Problem Types: CWE-200 Description: Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attackers to obtain sensitive system information via the dsm_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_50
CVE ID: CVE-2018-13298 State: PUBLISHED Published: 2019-04-01T14:30:54.811398Z Last Updated: 2024-09-17T00:50:52.355Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Synology Products: Android Moments Problem Types: CWE-300 Description: Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_52
CVE ID: CVE-2018-13299 State: PUBLISHED Published: 2019-04-01T14:31:19.573752Z Last Updated: 2024-09-16T19:24:24.014Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Synology Products: Calendar Problem Types: CWE-23 Description: Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_18_54
CVE ID: CVE-2018-13300 State: PUBLISHED Published: 2018-07-05T17:00:00 Last Updated: 2024-08-05T09:00:34.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4249 - https://github.com/FFmpeg/FFmpeg/commit/95556e27e2c1d56d9e18f5db34d6f756f3011148 - http://www.securityfoc
018/dsa-4249 - https://github.com/FFmpeg/FFmpeg/commit/95556e27e2c1d56d9e18f5db34d6f756f3011148 - http://www.securityfocus.com/bid/104675 - https://github.com/FFmpeg/FFmpeg/commit/e6d3fd942f772f54ab6a5ca619cdaadef26b7702
CVE ID: CVE-2018-13301 State: PUBLISHED Published: 2018-07-05T17:00:00 Last Updated: 2024-08-05T09:00:35.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/2aa9047486dbff12d9e040f917e5f799ed2fd78b - http://www.securityfocus.com/bid/104675
CVE ID: CVE-2018-13302 State: PUBLISHED Published: 2018-07-05T17:00:00 Last Updated: 2024-08-05T09:00:34.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/ed22dc22216f74c75ee7901f82649e1ff725ba50 - https://www.debian.org/security/2018/dsa-4249 -
hub.com/FFmpeg/FFmpeg/commit/ed22dc22216f74c75ee7901f82649e1ff725ba50 - https://www.debian.org/security/2018/dsa-4249 - http://www.securityfocus.com/bid/104675
CVE ID: CVE-2018-13303 State: PUBLISHED Published: 2018-07-05T17:00:00 Last Updated: 2024-08-05T09:00:34.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104675 - https://github.com/FFmpeg/FFmpeg/commit/00e8181bd97c834fe60751b0c511d4bb97875f78
CVE ID: CVE-2018-13304 State: PUBLISHED Published: 2018-07-05T17:00:00 Last Updated: 2024-08-05T09:00:34.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235
CVE ID: CVE-2018-13305 State: PUBLISHED Published: 2018-07-05T17:00:00 Last Updated: 2024-08-05T09:00:35.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/d08d4a8c7387e758d439b0592782e4cfa2b4d6a4 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
CVE ID: CVE-2018-13306 State: PUBLISHED Published: 2018-11-27T21:00:00 Last Updated: 2024-08-05T09:00:35.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154