rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-20393 
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20394 
Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20395 
NETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20396 
NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20397 
mplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20398 
Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20399 
Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20400 
Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20401 
Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20402 
Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the three accounts are the same as the usernames, which are guest, user, and author. Logging in with these accounts will grant any user the default privilege roles that were also created for each of the accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20404 
ETK_E900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary (uncontrollable) address, resulting in an eternal hang or a BSoD.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-20405 
BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error. NOTE: This has been disputed with the following reasoning: "The issue reported requires full developer level access to the content management system where cross site scripting is not an issue -- you already have full control of the CMS including running arbitrary PHP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T23:00:00.000Z
CVE-2018-20406 
Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data. This issue is fixed in: v3.4.10, v3.4.10rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.7rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.7, v3.6.7rc1, v3.6.7rc2, v3.6.8, v3.6.8rc1, v3.6.9, v3.6.9rc1; v3.7.1, v3.7.1rc1, v3.7.1rc2, v3.7.2, v3.7.2rc1, v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T23:00:00.000Z
CVE-2018-20407 
An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T23:00:00.000Z
CVE-2018-20408 
An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated by mp42hls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T23:00:00.000Z
CVE-2018-20409 
An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T23:00:00.000Z
CVE-2018-20410 
WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability is triggered when sending a specially crafted packet to the AlarmServer (AEserver.exe) service listening on TCP port 12401.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T02:00:00.000Z
CVE-2018-20418 
index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T04:00:00.000Z
CVE-2018-20419 
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T03:00:00.000Z
CVE-2018-20420 
In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the target web site by creating a template and then using ../ directory traversal in the TemplateName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T03:00:00.000Z
CVE-2018-20421 
Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T03:00:00.000Z
CVE-2018-20422 
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which account will be accessed).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T04:00:00.000Z
CVE-2018-20423 
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T04:00:00.000Z
CVE-2018-20424 
Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T04:00:00.000Z
CVE-2018-20425 
libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T05:00:00.000Z
CVE-2018-20426 
libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T05:00:00.000Z
CVE-2018-20427 
libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T05:00:00.000Z
CVE-2018-20428 
libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T05:00:00.000Z
CVE-2018-20429 
libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T05:00:00.000Z
CVE-2018-20430 
GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T05:00:00.000Z
CVE-2018-20431 
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T05:00:00.000Z
CVE-2018-20432 
D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T13:41:04.000Z
CVE-2018-20433 
c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T13:00:00.000Z
CVE-2018-20434 
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T20:05:43.000Z
CVE-2018-20436 
The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests for URLs typed while composing a chat message, before that chat message is sent. There are also GET requests to other URLs on the same web server. This also affects one or more other Telegram products, such as Telegram Web-version 0.7.0. In addition, it can be interpreted as an SSRF issue. NOTE: a third party has reported that potentially unwanted behavior is caused by misconfiguration of the "Secret chats > Preview links" setting
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-24T20:00:00.000Z
CVE-2018-20437 
An issue was discovered in the fileDownload function in the CommonController class in FEBS-Shiro before 2018-11-05. An attacker can download a file via a request of the form /common/download?filename=1.jsp&delete=false. NOTE: the software maintainer disputes the significance of this report because the product uses a JAR archive for deployment, and this contains application.yml with configuration data
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20438 
Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20439 
Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20440 
Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20441 
Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20442 
Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20443 
Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20444 
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20445 
D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32 and iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T15:00:00.000Z
CVE-2018-20448 
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T16:00:00.000Z
CVE-2018-20449 
The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-04T15:25:30.000Z
CVE-2018-20450 
The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2017-2897.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T17:00:00.000Z
CVE-2018-20451 
The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T17:00:00.000Z
CVE-2018-20452 
The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, because of inconsistent memory management (new versus free) in ole2_read_header in ole.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T17:00:00.000Z
CVE-2018-20453 
The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T17:00:00.000Z
CVE-2018-20454 
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resume_list has XSS via the key parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T17:00:00.000Z
CVE-2018-20455 
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T19:00:00.000Z
CVE-2018-20456 
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T19:00:00.000Z
CVE-2018-20457 
In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20459.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T19:00:00.000Z
CVE-2018-20458 
In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T19:00:00.000Z
CVE-2018-20459 
In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20457.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T19:00:00.000Z
CVE-2018-20460 
In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T19:00:00.000Z
CVE-2018-20461 
In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T19:00:00.000Z
CVE-2018-20462 
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T21:00:00.000Z
CVE-2018-20463 
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an arbitrary file read vulnerability via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. This can also be used for SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T21:00:00.000Z
CVE-2018-20464 
There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This vulnerability is triggered upon an attempt to modify a user's mailbox with the wrong format. The response contains the user's previously entered email address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T23:00:00.000Z
CVE-2018-20465 
Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a {% string for craft.app.config.DB.user and craft.app.config.DB.password in the URI Format of the Site Settings, which causes a cleartext username and password to be displayed in a URI field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-25T23:00:00.000Z
CVE-2018-20467 
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T03:00:00.000Z
CVE-2018-20468 
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside an automation script that, when exported after execution, results in code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T13:35:05.000Z
CVE-2018-20469 
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploited to inject SQL queries and run standard h2 system functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T13:31:57.000Z
CVE-2018-20470 
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T13:26:53.000Z
CVE-2018-20472 
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T13:22:16.000Z