deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-17909
Published: 2018-11-05
Description: When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.securityfocus.com/bid/105691; https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01; http://www.securityfocus.com/bid/105691
CVE: CVE-2018-17913
Published: 2018-11-05
Description: A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704, CWE-704
References: http://www.securityfocus.com/bid/105691; https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01; http://www.securityfocus.com/bid/105691
CVE: CVE-2018-18964
Published: 2018-11-06
Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but there are several extensions in which contained HTML can be executed, such as the svg extension.
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/osCommerce/oscommerce2/issues/631; https://github.com/osCommerce/oscommerce2/issues/631
CVE: CVE-2018-18965
Published: 2018-11-06
Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but there are several alternative cases in which HTML can be executed, such as a file with no extension or an unrecognized extension (e.g., the test or test.asdf filename).
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/osCommerce/oscommerce2/issues/631; https://github.com/osCommerce/oscommerce2/issues/631
CVE: CVE-2018-18966
Published: 2018-11-06
Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in catalog/images/ bans the html extension, but Internet Explorer render HTML elements in a .eml file.
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/osCommerce/oscommerce2/issues/631; https://github.com/osCommerce/oscommerce2/issues/631
CVE: CVE-2018-18980
Published: 2018-11-06
Description: An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrary remote FTP server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://github.com/x-f1v3/ForCve/issues/5; https://www.manageengine.com/network-monitoring/help/read-me.html; https://github.com/x-f1v3/ForCve/issues/5
CVE: CVE-2018-18963
Published: 2018-11-06
Description: Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://lab.insightsecurity.com.br/e-commerce-degrau-publicidade/; https://lab.insightsecurity.com.br/e-commerce-degrau-publicidade/
CVE: CVE-2014-10077
Published: 2018-11-06
Description: Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/rubysec/ruby-advisory-db/pull/182/files; https://github.com/svenfuchs/i18n/pull/289; https://github.com/svenfuchs/i18n/releases/tag/v0.8.0
CVE: CVE-2018-16986
Published: 2018-11-06
Description: Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://e2e.ti.com/support/wireless-connectivity/bluetooth/f/538/t/742827; http://www.securityfocus.com/bid/105812; http://www.securitytracker.com/id/1042018
CVE: CVE-2018-1606
Published: 2018-11-06
Description: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow an authenticated user to obtain sensitive information from an error message that could be used in further attacks against the system. IBM X-Force ID: 143796.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10738301; https://exchange.xforce.ibmcloud.com/vulnerabilities/143796; http://www.ibm.com/support/docview.wss?uid=ibm10738301
CVE: CVE-2018-1694
Published: 2018-11-06
Description: IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 145609.
CVSS Score: 5.9 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=ibm10738301; https://exchange.xforce.ibmcloud.com/vulnerabilities/145609; http://www.ibm.com/support/docview.wss?uid=ibm10738301
CVE: CVE-2018-9355
Published: 2018-11-06
Description: In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74016921.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104461; https://source.android.com/security/bulletin/2018-06-01; http://www.securityfocus.com/bid/104461
CVE: CVE-2018-9356
Published: 2018-11-06
Description: In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74950468.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://www.securityfocus.com/bid/104461; https://source.android.com/security/bulletin/2018-06-01; http://www.securityfocus.com/bid/104461
CVE: CVE-2018-9357
Published: 2018-11-06
Description: In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74947856.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104461; https://source.android.com/security/bulletin/2018-06-01; http://www.securityfocus.com/bid/104461
CVE: CVE-2018-9358
Published: 2018-11-06
Description: In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-73172115.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104461; https://source.android.com/security/bulletin/2018-06-01; http://www.securityfocus.com/bid/104461
CVE: CVE-2018-9359
Published: 2018-11-06
Description: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74196706.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104461; https://source.android.com/security/bulletin/2018-06-01; http://www.securityfocus.com/bid/104461
CVE: CVE-2018-9360
Published: 2018-11-06
Description: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74201143.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104461; https://source.android.com/security/bulletin/2018-06-01; http://www.securityfocus.com/bid/104461
CVE: CVE-2018-9361
Published: 2018-11-06
Description: In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74202041.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104461; https://source.android.com/security/bulletin/2018-06-01; http://www.securityfocus.com/bid/104461
CVE: CVE-2018-9362
Published: 2018-11-06
Description: In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-72298611.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104461; https://source.android.com/security/bulletin/2018-06-01; http://www.securityfocus.com/bid/104461
CVE: CVE-2018-9363
Published: 2018-11-06
Description: In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
CVSS Score: 8.4 (HIGH)
CWE: CWE-190, CWE-787
References: https://access.redhat.com/errata/RHSA-2018:2948; https://access.redhat.com/errata/RHSA-2019:2029; https://access.redhat.com/errata/RHSA-2019:2043
CVE: CVE-2018-9385
Published: 2018-11-06
Description: In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105887; https://source.android.com/security/bulletin/pixel/2018-06-01; http://www.securityfocus.com/bid/105887
CVE: CVE-2018-9415
Published: 2018-11-06
Description: In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://source.android.com/security/bulletin/pixel/2018-07-01; https://usn.ubuntu.com/3752-1/; https://usn.ubuntu.com/3752-2/
CVE: CVE-2018-9422
Published: 2018-11-06
Description: In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.suse.com/show_bug.cgi?id=1102001&_ga=2.244[PII_REDACTED]32[PII_REDACTED][PII_REDACTED][PII_REDACTED]022; https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html; https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
CVE: CVE-2018-9427
Published: 2018-11-06
Description: In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-77486542.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9436
Published: 2018-11-06
Description: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79164722.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9437
Published: 2018-11-06
Description: In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78656554.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9438
Published: 2018-11-06
Description: When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. This could lead to a local denial of service of security updates with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android ID: A-78644887.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9444
Published: 2018-11-06
Description: In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service (remote hang or reboot) with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android ID: A-63521984.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9445
Published: 2018-11-06
Description: In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a USB device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80436257.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; https://www.exploit-db.com/exploits/45192/
CVE: CVE-2018-9446
Published: 2018-11-06
Description: In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-80145946.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9448
Published: 2018-11-06
Description: In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-79944113.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9450
Published: 2018-11-06
Description: In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79541338.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9451
Published: 2018-11-06
Description: In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-79488511.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9453
Published: 2018-11-06
Description: In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78288378.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9454
Published: 2018-11-06
Description: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78286118.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9455
Published: 2018-11-06
Description: In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78136677.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9458
Published: 2018-11-06
Description: In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-71786287.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1021
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9459
Published: 2018-11-06
Description: In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error. This could lead to a remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-66230183.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-9465
Published: 2018-11-06
Description: In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69164715 References: Upstream kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1041432; https://source.android.com/security/bulletin/2018-08-01; http://www.securitytracker.com/id/1041432