deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-18995
Published: 2019-01-03
Description: Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrative telnet or web interfaces, which could enable various effects vectors, including conducting device resets, reading or modifying registers, and changing configuration settings such as IP addresses.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: http://www.securityfocus.com/bid/106247; https://ics-cert.us-cert.gov/advisories/ICSA-18-352-01; http://www.securityfocus.com/bid/106247
CVE: CVE-2018-18997
Published: 2019-01-03
Description: Pluto Safety PLC Gateway Ethernet devices in ABB GATE-E1 and GATE-E2 all versions allows an unauthenticated attacker using the administrative web interface to insert an HTML/Javascript payload into any of the device properties, which may allow an attacker to display/execute the payload in a visitor browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106247; https://ics-cert.us-cert.gov/advisories/ICSA-18-352-01; http://www.securityfocus.com/bid/106247
CVE: CVE-2018-19249
Published: 2019-01-03
Description: The Stripe API v1 allows remote attackers to bypass intended access restrictions by replaying api.stripe.com /v1/tokens XMLHttpRequest data, parsing the response under the object card{}, and reading the cvc_check information if the creation is successful without charging the actual card used in the transaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://fredmooredamian.blogspot.com/2019/01/improper-authentication-on-stripe-api-v1.html; https://fredmooredamian.blogspot.com/2019/01/improper-authentication-on-stripe-api-v1.html
CVE: CVE-2018-3986
Published: 2019-01-03
Description: An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The "Secret Chats" functionality allows a user to delete all traces of a chat, either by using a time trigger or by direct request. There is a bug in this functionality that leaves behind photos taken and shared on the secret chats, even after the chats are deleted. These photos will be stored in the device and accessible to all applications installed on the Android device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106295; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0654; http://www.securityfocus.com/bid/106295
CVE: CVE-2018-4012
Published: 2019-01-03
Description: An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorrectly handles overlong headers, leading to arbitrary code execution. An unauthenticated attacker could impersonate a remote BrightCloud server to trigger this vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-119
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0683; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0683
CVE: CVE-2018-8827
Published: 2019-01-03
Description: The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7[PII_REDACTED][PII_REDACTED]4353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://45.32.113.185/075a6fa2d5db3bf3457896bee6db6787.html; http://45.32.113.185/075a6fa2d5db3bf3457896bee6db6787.html
CVE: CVE-2019-5005
Published: 2019-01-03
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause corruption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-5006
Published: 2019-01-03
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is a NULL pointer dereference during PDF parsing.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-5007
Published: 2019-01-03
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-5009
Published: 2019-01-04
Description: Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into the image; PHP code can be executed using "<? ?>" tags, as demonstrated by a CompanyDetailsSave action. This bypasses the bad-file-extensions protection mechanism. It is related to actions/CompanyDetailsSave.php, actions/UpdateCompanyLogo.php, and models/CompanyDetails.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://code.vtiger.com/vtiger/vtigercrm/commit/52fc2fb520ddc55949c2fbedaabd61ddd0109375; http://lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-January/037852.html; https://pentest.com.tr/exploits/Vtiger-CRM-7-1-0-Remote-Code-Execution.html
CVE: CVE-2019-5310
Published: 2019-01-04
Description: YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/doublefast/yunucms/issues/6; https://github.com/doublefast/yunucms/issues/6
CVE: CVE-2018-1657
Published: 2019-01-04
Description: IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 144883.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106460; https://exchange.xforce.ibmcloud.com/vulnerabilities/144883; https://www.ibm.com/support/docview.wss?uid=ibm10792081
CVE: CVE-2018-1859
Published: 2019-01-04
Description: IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to escalate their privileges. IBM X-Force ID: 151258.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/106456; https://exchange.xforce.ibmcloud.com/vulnerabilities/151258; https://www.ibm.com/support/docview.wss?uid=ibm10792055
CVE: CVE-2018-1888
Published: 2019-01-04
Description: An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function. IBM X-Force ID: 152079.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-426
References: http://www.securityfocus.com/bid/106455; https://exchange.xforce.ibmcloud.com/vulnerabilities/152079; https://www.ibm.com/support/docview.wss?uid=ibm10740233
CVE: CVE-2018-1951
Published: 2019-01-04
Description: IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153494.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106460; https://exchange.xforce.ibmcloud.com/vulnerabilities/153494; https://www.ibm.com/support/docview.wss?uid=ibm10792081
CVE: CVE-2019-5311
Published: 2019-01-04
Description: An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/doublefast/yunucms/issues/5; https://github.com/doublefast/yunucms/issues/5
CVE: CVE-2018-20671
Published: 2019-01-04
Description: load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; http://www.securityfocus.com/bid/106457
CVE: CVE-2019-5312
Published: 2019-01-04
Description: An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://github.com/Wechat-Group/WxJava/issues/903; https://github.com/Wechat-Group/WxJava/issues/903
CVE: CVE-2018-20673
Published: 2019-01-04
Description: The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-787
References: http://www.securityfocus.com/bid/106454; https://sourceware.org/bugzilla/show_bug.cgi?id=24039; http://www.securityfocus.com/bid/106454
CVE: CVE-2018-5410
Published: 2019-01-07
Description: Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/106274; https://cwe.mitre.org/data/definitions/121.html; https://github.com/dokan-dev/dokany/releases/tag/v1.2.1.1000
CVE: CVE-2018-5481
Published: 2019-01-07
Description: OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.
CVSS Score: 7.4 (HIGH)
CWE: CWE-311
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-11788
Published: 2019-01-07
Description: Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitigation codes against XXE. This is a potential security risk as an user can inject external XML entities in Apache Karaf version prior to 4.1.7 or 4.2.2. It has been fixed in Apache Karaf 4.1.7 and 4.2.2 releases.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://karaf.apache.org/security/cve-2018-11788.txt; http://www.securityfocus.com/bid/106479; http://karaf.apache.org/security/cve-2018-11788.txt
CVE: CVE-2018-11798
Published: 2019-01-07
Description: The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-538
References: http://www.securityfocus.com/bid/106501; https://access.redhat.com/errata/RHSA-2019:1545; https://access.redhat.com/errata/RHSA-2019:3140
CVE: CVE-2018-1320
Published: 2019-01-07
Description: Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2019/07/24/3; http://www.securityfocus.com/bid/106551; https://access.redhat.com/errata/RHSA-2019:2413
CVE: CVE-2019-5488
Published: 2019-01-07
Description: EARCLINK ESPCMS-P8 has SQL injection in the install_pack/index.php?ac=Member&at=verifyAccount verify_key parameter. install_pack/espcms_public/espcms_db.php may allow retrieving sensitive information from the ESPCMS database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.iwantacve.cn/index.php/archives/108/; http://www.iwantacve.cn/index.php/archives/108/
CVE: CVE-2019-5489
Published: 2019-01-07
Description: The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-319
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
CVE: CVE-2018-13260
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13261
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13262
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13263
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13264
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13265
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13266
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13267
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13268
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13269
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13270
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13271
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13272
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13273
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13274
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13275
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13276
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-13277
Published: 2019-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2015-9275
Published: 2019-01-07
Description: ARC 5.21q allows directory traversal via a full pathname in an archive file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00048.html; https://bugs.debian.org/774527; https://bugzilla.redhat.com/show_bug.cgi?id=1179142
CVE: CVE-2019-5720
Published: 2019-01-08
Description: includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the attacker to grab the entire database of the application via the void_transaction.php filterType parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FrontAccountingERP/FA/issues/38; https://github.com/FrontAccountingERP/FA/issues/38
CVE: CVE-2018-1918
Published: 2019-01-08
Description: IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152785.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10793759; http://www.securityfocus.com/bid/106483; https://exchange.xforce.ibmcloud.com/vulnerabilities/152785
CVE: CVE-2018-1932
Published: 2019-01-08
Description: IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 153175.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10793601; http://www.securityfocus.com/bid/106486; https://exchange.xforce.ibmcloud.com/vulnerabilities/153175
CVE: CVE-2018-1993
Published: 2019-01-08
Description: IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106485; https://exchange.xforce.ibmcloud.com/vulnerabilities/154440; https://www.ibm.com/support/docview.wss?uid=ibm10793719
CVE: CVE-2018-19250
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19251
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19252
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19253
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19254
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19255
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19256
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19257
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19258
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19259
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19260
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19261
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19262
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19263
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19264
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19265
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19266
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none