rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-17229 
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-19T22:00:00.000Z
CVE-2018-17230 
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-19T22:00:00.000Z
CVE-2018-17231 
Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by multiple third parties because the described attack scenario does not cross a privilege boundary
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-19T22:00:00.000Z
CVE-2018-17232 
SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive-bot) before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T06:00:00.000Z
CVE-2018-17233 
A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T00:00:00.000Z
CVE-2018-17234 
Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T00:00:00.000Z
CVE-2018-17235 
The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to a heap-based buffer over-read, causing denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T00:00:00.000Z
CVE-2018-17236 
The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T00:00:00.000Z
CVE-2018-17237 
A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T00:00:00.000Z
CVE-2018-17240 
There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration (e.g., username and password).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-10T17:03:52.000Z
CVE-2018-17243 
Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T07:00:00.000Z
CVE-2018-17244 
Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; when used with run as, this can result in the request running as the incorrect user. This could allow a user to access information that they should not have access to.
Problem types: cwe_id: CWE-362
description: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: Elastic
product: Elasticsearch
Published: 2018-12-20T22:00:00.000Z
CVE-2018-17245 
Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are included in the HTTP request that could be recovered by an external resource provider.
Problem types: cwe_id: CWE-201
description: CWE-201: Information Exposure Through Sent Data
Affected products: vendor: Elastic
product: Kibana
Published: 2018-12-20T22:00:00.000Z
CVE-2018-17246 
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
Problem types: cwe_id: CWE-73
description: CWE-73: External Control of File Name or Path
Affected products: vendor: Elastic
product: Kibana
Published: 2018-12-20T22:00:00.000Z
CVE-2018-17247 
Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content of local files on the Elasticsearch node. This could allow a user to access information that they should not have access to.
Problem types: cwe_id: CWE-611
description: CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: Elastic
product: Elasticsearch
Published: 2018-12-20T22:00:00.000Z
CVE-2018-17254 
The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T14:00:00.000Z
CVE-2018-17256 
Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public access of a content.
Problem types: description: Persistent cross-site scripting
Affected products: vendor: CyberSecurity Philippines - CERT
product: UmbracoCMS
Published: 2018-11-27T21:00:00.000Z
CVE-2018-17281 
There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connection to a websocket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-24T22:00:00.000Z
CVE-2018-17282 
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T20:00:00.000Z
CVE-2018-17283 
Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL Injection attack via the /api/json/device/setManaged name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T03:00:00.000Z
CVE-2018-17287 
In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T17:29:40.000Z
CVE-2018-17288 
Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Filename" field in /Kofax/KFS/ThinClient/document/upload/ - (Thin Client) or (2) "DeviceName" field in /Kofax/KFS/Admin/DeviceService/device/ - (Administration Console).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T17:42:22.000Z
CVE-2018-17289 
An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to read arbitrary files via crafted XML inside an imported package configuration (.ZIP file) within the Kofax/KFS/Admin/PackageService/package/upload file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T17:47:25.000Z
CVE-2018-17292 
An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic comparison, allowing attackers to cause a Denial of Service (application crash caused by out-of-bounds read) by crafting a file that has fewer than 4 bytes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T06:00:00.000Z
CVE-2018-17293 
An issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp does not check whether there is Emscripten memory to store the command-line arguments passed by the input WebAssembly file's main function, which allows attackers to cause a denial of service (application crash by NULL pointer dereference) or possibly have unspecified other impact by crafting certain WebAssembly files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T06:00:00.000Z
CVE-2018-17294 
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T06:00:00.000Z
CVE-2018-17297 
The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T06:00:00.000Z
CVE-2018-17298 
An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T06:00:00.000Z
CVE-2018-17300 
Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager/view/cu_menus section name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T06:00:00.000Z
CVE-2018-17301 
Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T06:00:00.000Z
CVE-2018-17302 
Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T06:00:00.000Z
CVE-2018-17305 
UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T16:16:21.000Z
CVE-2018-17309 
On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17310 
On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17311 
On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17312 
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17313 
On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17314 
On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17315 
On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17316 
On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T22:00:00.000Z
CVE-2018-17317 
FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io_mode, ap_mode, io_action, io_in_iface, io_in_set, io_in_ip, io_in_mask, io_in_gw, io_out_iface, io_out_set, io_out_mask, io_out_gw, iface, or domain parameter to /www/script/config_iface.php, or the newSSID, hostapd_secure, hostapd_wpa_passphrase, or supplicant_ssid parameter to /www/page_config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T18:00:00.000Z
CVE-2018-17320 
An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadmin_aaddpost action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T18:00:00.000Z
CVE-2018-17321 
An issue was discovered in SeaCMS 6.64. XSS exists in admin_datarelate.php via the time or maxHit parameter in a dorandomset action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-22T02:00:00.000Z
CVE-2018-17322 
Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-22T02:00:00.000Z
CVE-2018-17332 
An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in svg_string.c returns its input pointer in certain circumstances, which might result in a memory leak caused by wasteful malloc calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-22T16:00:00.000Z
CVE-2018-17333 
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in svgStringToLength in svg_types.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because sscanf is misused.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-22T16:00:00.000Z
CVE-2018-17334 
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the svgGetNextPathField function in svg_string.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because a strncpy copy limit is miscalculated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-22T16:00:00.000Z
CVE-2018-17336 
UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-22T16:00:00.000Z
CVE-2018-17337 
Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T21:00:00.000Z
CVE-2018-17338 
An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T05:00:00.000Z
CVE-2018-17341 
BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, as demonstrated by a launch.php?bigtree_htaccess_url=admin/images/..\ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T05:00:00.000Z
CVE-2018-17358 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in _bfd_stab_section_find_nearest_line in syms.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T18:00:00.000Z
CVE-2018-17359 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in bfd_zalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T18:00:00.000Z
CVE-2018-17360 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. a heap-based buffer over-read in bfd_getl32 in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be triggered by the executable objdump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T18:00:00.000Z
CVE-2018-17361 
Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php because $_SERVER['PHP_SELF'] is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T18:00:00.000Z
CVE-2018-17364 
OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T18:00:00.000Z
CVE-2018-17365 
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T21:00:00.000Z
CVE-2018-17366 
An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T18:00:00.000Z
CVE-2018-17368 
An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T22:00:00.000Z
CVE-2018-17369 
An issue was discovered in springboot_authority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-23T22:00:00.000Z
CVE-2018-17374 
SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T17:18:54.000Z
CVE-2018-17375 
SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17376 
SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17377 
SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17378 
SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17379 
SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17380 
SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_end_date parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17381 
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T17:17:24.000Z
CVE-2018-17382 
SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z
CVE-2018-17383 
SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T00:00:00.000Z