rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-17932 
JUUKO K-800 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.) is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running.
Problem types: cwe_id: CWE-294
description: AUTHENTICATION BYPASS BY CAPTURE-REPLAY CWE-294
Affected products: vendor: n/a
product: JUUKO K-800
Published: 2020-11-02T16:51:15.000Z
CVE-2018-17933 
VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client credentials, they may be able to execute admin commands on the connected robot.
Problem types: cwe_id: CWE-285
description: IMPROPER AUTHORIZATION CWE-285
Affected products: vendor: n/a
product: VGo Robot
Published: 2018-10-30T21:00:00.000Z
CVE-2018-17934 
NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.
Problem types: cwe_id: CWE-22
description: IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
Affected products: vendor: n/a
product: NUUO CMS
Published: 2018-11-27T21:00:00.000Z
CVE-2018-17935 
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
Problem types: cwe_id: CWE-294
description: AUTHENTICATION BYPASS BY CAPTURE-REPLAY CWE-294
Affected products: vendor: Telecrane
product: F25 Series
Published: 2018-10-24T13:00:00.000Z
CVE-2018-17936 
NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution.
Problem types: cwe_id: CWE-434
description: UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE CWE-434
Affected products: vendor: n/a
product: NUUO CMS
Published: 2018-11-27T21:00:00.000Z
CVE-2018-17937 
gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: ICS-CERT
product: gpsd and microjson (Open Source Project)
Published: 2019-03-13T17:00:00.000Z
CVE-2018-17938 
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T08:00:00.000Z
CVE-2018-17939 
An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the merge request JSON endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T23:00:00.000Z
CVE-2018-17942 
The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T08:00:00.000Z
CVE-2018-17944 
On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-12T16:00:00.000Z
CVE-2018-17946 
The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T08:00:00.000Z
CVE-2018-17947 
The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T08:00:00.000Z
CVE-2018-17948 
An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3.
Problem types: description: Open Redirect
Affected products: vendor: Access Manager
product: Access Manager
Published: 2018-11-20T18:00:00.000Z
CVE-2018-17949 
Cross site scripting vulnerability in iManager prior to 3.1 SP2.
Problem types: description: XSS
Affected products: vendor: Micro Focus
product: NetIQ iManager 3.1 SP2
Published: 2018-12-12T14:00:00.000Z
CVE-2018-17950 
Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2
Problem types: description: Improper Access
Affected products: vendor: Micro Focus
product: NetIQ eDirectory 9.1 SP2
Published: 2018-12-12T14:00:00.000Z
CVE-2018-17952 
Cross site scripting vulnerability in eDirectory prior to 9.1 SP2
Problem types: description: XSS
Affected products: vendor: Micro Focus
product: NetIQ eDirectory 9.1 SP2
Published: 2018-12-12T14:00:00.000Z
CVE-2018-17953 pam_access does not handle netmask matches correctly
A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: SUSE
product: pam
Credits: lang: en
value: Daniel Pecka
Published: 2018-11-27T13:00:00.000Z
CVE-2018-17954 crowbar provision leaks admin password to all nodes in cleartext
An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git.1581611758.f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git.1582892022.cbd70e833-3.19.3, crowbar-.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: SUSE
product: SUSE OpenStack Cloud 7
vendor: SUSE
product: SUSE OpenStack Cloud 8
vendor: SUSE
product: SUSE OpenStack Cloud 9
vendor: SUSE
product: SUSE OpenStack Cloud Crowbar 8
vendor: SUSE
product: SUSE OpenStack Cloud Crowbar 9
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.3
baseSeverity: CRITICAL
Credits: lang: en
value: Dirk Mueller of SUSE
Published: 2020-04-03T07:05:13.265Z
CVE-2018-17955 Static tempfile name allows overwriting of arbitrary files
In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection
Problem types: cwe_id: CWE-377
description: CWE-377
Affected products: vendor: SUSE
product: yast2-multipath
Credits: lang: en
value: Johannes Segitz of SUSE
Published: 2019-03-15T20:00:00.000Z
CVE-2018-17956 Password exposed in process listing
In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: SUSE
product: yast2-samba-provision
Credits: lang: en
value: Johannes Segitz of SUSE
Published: 2019-03-15T20:00:00.000Z
CVE-2018-17957 yast2-rmt leaks database passwords in process list
The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.
Problem types: cwe_id: CWE-214
description: CWE-214
Affected products: vendor: SUSE
product: yast2-rmt
Credits: lang: en
value: Fabian Schilling of SUSE
Published: 2018-12-26T15:00:00.000Z
CVE-2018-17958 
Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-17960 
CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-14T20:00:00.000Z
CVE-2018-17961 
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T16:00:00.000Z
CVE-2018-17962 
Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-17963 
qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-17964 
Aryanic HighPortal 12.5 has XSS via an Add Tags action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-17T14:00:00.000Z
CVE-2018-17965 
ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T18:00:00.000Z
CVE-2018-17966 
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T18:00:00.000Z
CVE-2018-17967 
ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T18:00:00.000Z
CVE-2018-17968 
A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random() function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by writing the same random function code in an exploit contract to determine the deadSeat value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-23T21:00:00.000Z
CVE-2018-17969 
Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T19:00:00.000Z
CVE-2018-17972 
An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T22:00:00.000Z
CVE-2018-17974 
An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlt_en10mb_encode() of the file plugins/dlt_en10mb/en10mb.c, due to inappropriate values in the function memmove(). The length (pktlen + ctx -> l2len) can be larger than source value (packet + ctx->l2len) because the function fails to ensure the length of a packet is valid. This leads to Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-03T22:00:00.000Z
CVE-2018-17975 
An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T23:00:00.000Z
CVE-2018-17976 
An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via Epic change descriptions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T23:00:00.000Z
CVE-2018-17977 
The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T17:00:00.000Z
CVE-2018-17980 
NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and the DLL are in the current working directory, and the Trojan horse code is executed. (The directory could, in general, be on a local filesystem or a network share.).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-15T19:00:00.000Z
CVE-2018-17981 
Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-22T00:04:01.000Z
CVE-2018-17983 
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-04T23:00:00.000Z
CVE-2018-17984 
An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-04T23:00:00.000Z
CVE-2018-17985 
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplus_demangle_type function making recursive calls to itself in certain scenarios involving many 'P' characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-04T23:00:00.000Z
CVE-2018-17986 
rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-05T00:00:00.000Z
CVE-2018-17987 
The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generate a random number for the case where NUM_TILES equals the number of people who purchased a tile, which allows an attacker to control the awarding of the prize by being the last person to purchase a tile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-17988 
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2018-17989 
A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1.01 that allows authenticated attackers to inject a JavaScript or HTML payload inside the ACL page. The injected payload would be executed in a user's browser when "/cgi-bin/New_GUI/Acl.asp" is requested.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-01T20:48:16.000Z
CVE-2018-17990 
An issue was discovered on D-Link DSL-3782 devices with firmware 1.01. An OS command injection vulnerability in Acl.asp allows a remote authenticated attacker to execute arbitrary OS commands via the ScrIPaddrEndTXT parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-01T20:53:07.000Z
CVE-2018-17996 
LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:56:56.000Z
CVE-2018-17997 
LayerBB 1.1.1 allows XSS via the titles of conversations (PMs).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T19:02:22.000Z
CVE-2018-18004 
Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T20:00:00.000Z
CVE-2018-18005 
Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL query string parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T20:00:00.000Z
CVE-2018-18006 
Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names of printed files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-14T15:00:00.000Z
CVE-2018-18007 
atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T23:00:00.000Z
CVE-2018-18008 
spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T23:00:00.000Z
CVE-2018-18009 
dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T23:00:00.000Z
CVE-2018-18013 
* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into Java objects in memory, giving rise to a remote code execution vulnerability.  NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-24T21:00:00.000Z
CVE-2018-18014 
* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001.  NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-24T21:00:00.000Z
CVE-2018-18016 
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-05T17:00:00.000Z
CVE-2018-18017 
XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-15T20:24:56.000Z
CVE-2018-18018 
SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-15T20:27:53.000Z
CVE-2018-18019 
XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slide[title], Slide[media_file], or Slide[image_url] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-15T20:29:31.000Z
CVE-2018-18020 
In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long time, which allows remote attackers to cause a denial of service via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-06T00:00:00.000Z
CVE-2018-18021 
arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-07T06:00:00.000Z
CVE-2018-18023 
In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-07T18:00:00.000Z
CVE-2018-18024 
In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-07T18:00:00.000Z
CVE-2018-18025 
In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-07T18:00:00.000Z