rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-5888 
While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
Problem types: description: Incorrect Calculation of Buffer Size in Boot
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5889 
While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
Problem types: description: Improper Restriction of Operations within the Bounds of a Memory Buffer in Boot
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5890 
If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
Problem types: description: Integer Underflow in Boot
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5891 
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in Snapdragon Mobile and Snapdragon Wear.
Problem types: description: Use After Free in Data
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5892 
The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.
Problem types: description: Configuration in Android
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5893 
While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer overwrite can occur.
Problem types: description: Buffer Copy without Checking Size of Input in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5894 
Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.
Problem types: description: Improper Validation of Array Index in Multimedia
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5895 
Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packet_buffer in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
Problem types: description: Buffer Over-read in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5896 
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be copied.
Problem types: description: Information Exposure in DIAG services
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5897 
While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
Problem types: description: Buffer Over-read in DIAG Services
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5898 
Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
Problem types: description: Integer Overflow to Bufer Overflow in Audio
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5899 
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, whenever TDLS connection is setup, we are freeing the netbuf in ol_tx_completion_handler and after that, we are accessing it in NBUF_UPDATE_TX_PKT_COUNT causing a use after free.
Problem types: description: Use After Free in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2018-5903 
Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
Problem types: description: Improper Validation of Array Index in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music
Published: 2019-06-14T17:02:10.000Z
CVE-2018-5904 
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while list traversal in LPM status driver for clean up, use after free vulnerability may occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T18:00:00.000Z
CVE-2018-5905 
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a race condition while accessing num of clients in DIAG services can lead to out of boundary access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-19T14:00:00.000Z
CVE-2018-5906 
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in debugfs module due to lack of check in size of input before copying into buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T18:00:00.000Z
CVE-2018-5907 
Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
Problem types: description: Buffer Copy Without Checking Size of Input in Audio
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T19:00:00.000Z
CVE-2018-5908 
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in display function due to lack of buffer length validation before copying.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T18:00:00.000Z
CVE-2018-5909 
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow occur may occur in display handlers due to lack of checking in buffer size before copying into it and will lead to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T18:00:00.000Z
CVE-2018-5910 
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a memory corruption can occur in kernel due to improper check in callers count parameter in display handlers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T18:00:00.000Z
CVE-2018-5911 
Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 855, SDM630, SDM660, SDX20, SDX24
Problem types: description: Possible Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Published: 2019-06-14T17:02:10.000Z
CVE-2018-5912 
Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660
Problem types: description: Buffer Overflow in Video
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile
Published: 2018-11-28T15:00:00.000Z
CVE-2018-5913 
A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
Problem types: description: Cryptographic Issues in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published: 2019-06-14T17:02:10.000Z
CVE-2018-5914 
Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.
Problem types: description: Improper Validation of Array Index in TZ CORE
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-10-26T13:00:00.000Z
CVE-2018-5915 
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130
Problem types: description: Reachable Assertion in MODEM IP Stack
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2019-01-18T22:00:00.000Z
CVE-2018-5916 
Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.
Problem types: description: Information Exposure in MODEM
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2018-11-28T15:00:00.000Z
CVE-2018-5917 
Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.
Problem types: description: Possible Buffer Overflow in DRM
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile
Published: 2018-11-28T15:00:00.000Z
CVE-2018-5918 
Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.
Problem types: description: Integer Overflow to Buffer Overflow in DRM Trusted Application
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2018-11-28T15:00:00.000Z
CVE-2018-5919 
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a use after free issue in WLAN host driver can lead to device reboot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T18:00:00.000Z
CVE-2018-5921 
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.
Problem types: description: Cross Site Request Forgery
Affected products: vendor: HP Inc.
product: Certain HP Enterprise Printers, HP PageWide Printers, and MFP Products
Published: 2018-10-03T20:00:00.000Z
CVE-2018-5923 
In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code.
Problem types: description: Execution of arbitrary code.
Affected products: vendor: HP
product: HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers
Published: 2019-03-27T15:15:06.000Z
CVE-2018-5924 
A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution.
Problem types: description: Remote code execution
Affected products: vendor: HP Inc.
product: HP inkjet printers
Published: 2018-08-13T15:00:00.000Z
CVE-2018-5925 
A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code execution.
Problem types: description: Remote code execution
Affected products: vendor: HP Inc.
product: HP inkjet printers
Published: 2018-08-13T15:00:00.000Z
CVE-2018-5926 
A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier.
Problem types: description: Information disclosure.
Affected products: vendor: HP
product: HP Remote Graphics Software
Published: 2019-03-27T15:23:26.000Z
CVE-2018-5927 
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code.
Problem types: description: Local code execution.
Affected products: vendor: HP
product: HP Support Assistant
Published: 2019-03-27T15:39:54.000Z
CVE-2018-5950 
Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-23T16:00:00.000Z
CVE-2018-5951 
An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T21:20:27.000Z
CVE-2018-5953 
The swiotlb_print_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-07T18:00:00.000Z
CVE-2018-5954 
phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T16:00:00.000Z
CVE-2018-5955 
An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-21T22:00:00.000Z
CVE-2018-5956 
In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402414.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-21T22:00:00.000Z
CVE-2018-5957 
In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40242C.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-21T22:00:00.000Z
CVE-2018-5958 
In Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402424.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-21T22:00:00.000Z
CVE-2018-5960 
Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-22T01:00:00.000Z
CVE-2018-5961 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the `module` value of the `index.php` file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-22T01:00:00.000Z
CVE-2018-5962 
index.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpini_editor module or the email_address parameter to the mail_add-new module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-22T01:00:00.000Z
CVE-2018-5963 
CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/addbookmark.php via the title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T16:00:00.000Z
CVE-2018-5964 
CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_messages parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T16:00:00.000Z
CVE-2018-5965 
CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_errors parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T16:00:00.000Z
CVE-2018-5967 
Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T08:00:00.000Z
CVE-2018-5968 
FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-22T04:00:00.000Z
CVE-2018-5969 
Cross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax/ajax_new_admin.php, as demonstrated by adding an admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T10:00:00.000Z
CVE-2018-5970 
SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z
CVE-2018-5971 
SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z
CVE-2018-5972 
SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T10:00:00.000Z
CVE-2018-5973 
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-25T17:00:00.000Z
CVE-2018-5974 
SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z
CVE-2018-5975 
SQL Injection exists in the Smart Shoutbox 3.0.0 component for Joomla! via the shoutauthor parameter to the archive URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z
CVE-2018-5976 
Cross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T10:00:00.000Z
CVE-2018-5977 
SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T10:00:00.000Z
CVE-2018-5978 
SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T10:00:00.000Z
CVE-2018-5979 
SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T10:00:00.000Z
CVE-2018-5980 
SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-17T07:00:00.000Z