rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-0495 
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Problem types: description: side-channel attack
Affected products: vendor: n/a
product: Libgcrypt before 1.7.10 and 1.8.x before 1.8.3
Published: 2018-06-13T23:00:00.000Z
CVE-2018-0496 
Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's Dink Smallwood HD / ProtonSDK version) before 3.14 allow an attacker to overwrite arbitrary files on the user's system.
Problem types: description: Directory traversal
Affected products: vendor: n/a
product: DFArc2 before 3.14 unknown
Published: 2018-06-12T20:00:00.000Z
CVE-2018-0497 
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.
Problem types: description: plaintext recovery
Affected products: vendor: n/a
product: ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14
Published: 2018-07-28T17:00:00.000Z
CVE-2018-0498 
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.
Problem types: description: plaintext recovery
Affected products: vendor: n/a
product: ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14
Published: 2018-07-28T17:00:00.000Z
CVE-2018-0499 
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().
Problem types: description: XSS
Affected products: vendor: n/a
product: Xapian xapian-core before 1.4.6
Published: 2018-07-02T12:00:00.000Z
CVE-2018-0500 
Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).
Problem types: description: heap-based buffer overflow
Affected products: vendor: n/a
product: curl before 7.61.0
Published: 2018-07-11T13:00:00.000Z
CVE-2018-0501 
The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail.
Problem types: description: lack of signature verification
Affected products: vendor: n/a
product: APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3
Published: 2018-08-21T00:00:00.000Z
CVE-2018-0502 
An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line.
Problem types: description: improper parsing
Affected products: vendor: n/a
product: zsh before 5.6
Published: 2018-09-05T07:00:00.000Z
CVE-2018-0503 $wgRateLimits entry for 'user' overrides 'newbie'
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.
Problem types: description: Improper imlementation of documentation / spec
Affected products: vendor: mediawiki
product: mediawiki
Published: 2018-10-04T20:00:00.000Z
CVE-2018-0504 Information disclosure in Special:Redirect/logid
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid
Problem types: description: Information disclosure
Affected products: vendor: mediawiki
product: mediawiki
Published: 2018-10-04T20:00:00.000Z
CVE-2018-0505 BotPasswords can bypass CentralAuth's account lock
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
Problem types: description: Authentication bypass
Affected products: vendor: mediawiki
product: mediawiki
Published: 2018-10-04T20:00:00.000Z
CVE-2018-0506 
Nootka 1.4.4 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: SeeLook
product: Nootka
Published: 2018-01-26T16:00:00.000Z
CVE-2018-0507 
Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
product: FLET'S VIRUS CLEAR Easy Setup & Application Tool
vendor: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
product: FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool
Published: 2018-01-26T16:00:00.000Z
CVE-2018-0508 
Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: kkcal
product: epg search result viewer(kkcald)
Published: 2018-02-01T14:00:00.000Z
CVE-2018-0509 
Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: kkcal
product: epg search result viewer(kkcald)
Published: 2018-02-01T14:00:00.000Z
CVE-2018-0510 
Buffer overflow in epg search result viewer (kkcald) 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS (denial of service) attacks via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: kkcal
product: epg search result viewer(kkcald)
Published: 2018-02-01T14:00:00.000Z
CVE-2018-0511 
Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Jordy Meow
product: WP Retina 2x
Published: 2018-02-01T14:00:00.000Z
CVE-2018-0512 
Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: I-O DATA DEVICE, INC.
product: IP address setting tool "MagicalFinder"
Published: 2018-02-08T14:00:00.000Z
CVE-2018-0513 
Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: MT Systems Co., Ltd.
product: MTS Simple Booking C
vendor: MT Systems Co., Ltd.
product: MTS Simple Booking Business
Published: 2018-02-08T14:00:00.000Z
CVE-2018-0514 
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: futomi Co., Ltd.
product: MP Form Mail CGI eCommerce Edition
Published: 2018-02-08T14:00:00.000Z
CVE-2018-0515 
Untrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
product: "FLET'S Azukeru Backup Tool"
Published: 2018-02-16T17:00:00.000Z
CVE-2018-0516 
Untrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION
product: FLET'S v4 / v6 address selection tool
Published: 2018-02-16T17:00:00.000Z
CVE-2018-0517 
Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: KDDI CORPORATION
product: Anshin net security for Windows
Published: 2018-02-08T14:00:00.000Z
CVE-2018-0518 
LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: LINE Corporation
product: LINE for iOS
Published: 2018-02-23T15:00:00.000Z
CVE-2018-0519 
Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: FUJI SOFT INCORPORATED
product: FS010W
Published: 2018-02-23T15:00:00.000Z
CVE-2018-0520 
Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: FUJI SOFT INCORPORATED
product: FS010W
Published: 2018-02-23T15:00:00.000Z
CVE-2018-0521 
Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: BUFFALO INC.
product: WXR-1900DHP2
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0522 
Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file.
Problem types: description: Buffer Overflow
Affected products: vendor: BUFFALO INC.
product: WXR-1900DHP2
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0523 
Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: BUFFALO INC.
product: WXR-1900DHP2
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0524 
Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors.
Problem types: description: Remote code execution
Affected products: vendor: Jubatus Community
product: Jubatus
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0525 
Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Jubatus Community
product: Jubatus
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0526 
Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0527 
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0528 
Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0529 
Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0530 
SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0531 
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0532 
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0533 
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0534 
Cross-site scripting vulnerability in ArsenoL Version 0.5 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: FlaFla...
product: ArsenoL
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0535 
Cross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Kagaminokuni
product: PHP 2chBBS
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0536 
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi.
Problem types: description: Cross-site scripting
Affected products: vendor: Gundam Cult QQQ
product: QQQ SYSTEMS
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0537 
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz_op.cgi.
Problem types: description: Cross-site scripting
Affected products: vendor: Gundam Cult QQQ
product: QQQ SYSTEMS
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0538 
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Gundam Cult QQQ
product: QQQ SYSTEMS
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0539 
QQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors.
Problem types: description: Command Injection
Affected products: vendor: Gundam Cult QQQ
product: QQQ SYSTEMS
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0540 
Untrusted search path vulnerability in ViX version 2.21.148.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: K_OKADA
product: ViX
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0541 
Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: Hisayuki Nomura
product: Tiny FTP Daemon
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0542 
Directory traversal vulnerability in WebProxy version 1.7.8 allows an attacker to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: LunarNight Laboratory
product: WebProxy
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0543 
Untrusted search path vulnerability in Jtrim 1.53c and earlier (Installer) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: WoodyBells
product: Jtrim
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0544 
Untrusted search path vulnerability in WinShot 1.53a and earlier (Installer) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: WoodyBells
product: WinShot
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0545 
LXR version 1.0.0 to 2.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: LXR Project
product: LXR
Published: 2018-04-09T13:00:00.000Z
CVE-2018-0546 
Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Soflyy
product: WP All Import
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0547 
Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Soflyy
product: WP All Import
Published: 2018-03-09T16:00:00.000Z
CVE-2018-0548 
Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0549 
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0550 
Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0551 
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0552 
Untrusted search path vulnerability in The installer of PhishWall Client Firefox and Chrome edition for Windows Ver. 5.1.26 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: SecureBrain Corporation
product: The installer of PhishWall Client Firefox and Chrome edition for Windows
Published: 2018-03-22T13:00:00.000Z
CVE-2018-0553 
The iRemoconWiFi App for Android version 4.1.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Glamo Inc.
product: iRemoconWiFi App for Android
Published: 2018-04-09T13:00:00.000Z
CVE-2018-0554 
Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: BUFFALO INC.
product: WZR-1750DHP2
Published: 2018-04-09T13:00:00.000Z
CVE-2018-0555 
Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file.
Problem types: description: Buffer Overflow
Affected products: vendor: BUFFALO INC.
product: WZR-1750DHP2
Published: 2018-04-09T13:00:00.000Z
CVE-2018-0556 
Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: BUFFALO INC.
product: WZR-1750DHP2
Published: 2018-04-09T13:00:00.000Z
CVE-2018-0557 
Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Mailwise
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0558 
Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Mailwise
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0559 
Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Mailwise
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0560 
Hatena Bookmark App for iOS Version 3.0 to 3.70 allows remote attackers to spoof the address bar via vectors related to URL display.
Problem types: description: Address bar spoofing
Affected products: vendor: Hatena co.,ltd.
product: Hatena Bookmark App for iOS
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0561 
Untrusted search path vulnerability in The installer of PhishWall Client Internet Explorer edition Ver. 3.7.15 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: SecureBrain Corporation
product: The installer of PhishWall Client Internet Explorer edition
Published: 2018-04-16T13:00:00.000Z
CVE-2018-0562 
Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Coderium
product: Installer of SoundEngine Free
Published: 2018-04-16T13:00:00.000Z