rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-16366 
An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-02T22:00:00.000Z
CVE-2018-16367 
In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a #include.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-02T22:00:00.000Z
CVE-2018-16368 
SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16369 
XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16370 
In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16371 
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16372 
The issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php?c=content&a=search kw parameter. NOTE: this product is discontinued.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16373 
Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16374 
Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16375 
An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16376 
An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16379 
Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16380 
An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16381 
e107 2.1.8 has XSS via the e107_admin/users.php?mode=main&action=list user_loginname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T21:00:00.000Z
CVE-2018-16382 
Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T02:00:00.000Z
CVE-2018-16384 
A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through v3.1.0-rc3 via {`a`b} where a is a special function name (such as "if") and b is the SQL statement to be executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T00:00:00.000Z
CVE-2018-16385 
ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T02:00:00.000Z
CVE-2018-16386 
An issue was discovered in SWIFT Alliance Web Platform 7.1.23. A log injection (and an arbitrary log filename) can be achieved via the PATH_INFO to swp/login/EJBRemoteService/, related to com.swift.ejbgwt.j2ee.client.EjBlnvocationException error log information containing null@java:comp/env/ error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T19:58:09.000Z
CVE-2018-16387 
An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T02:00:00.000Z
CVE-2018-16388 
e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-12T16:00:00.000Z
CVE-2018-16389 
e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-12T16:00:00.000Z
CVE-2018-16391 
Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T14:00:00.000Z
CVE-2018-16392 
Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T14:00:00.000Z
CVE-2018-16393 
Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T14:00:00.000Z
CVE-2018-16395 
An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-16T18:00:00.000Z
CVE-2018-16396 
An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-16T18:00:00.000Z
CVE-2018-16397 
In LimeSurvey before 3.14.7, an admin user can leverage a "file upload" question to read an arbitrary file,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T15:00:00.000Z
CVE-2018-16398 
In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16402 
libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16403 
libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16405 
An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16406 
An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafted cabinet label.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16407 
An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16408 
D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16409 
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16410 
Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation, related to applications/dashboard/models/class.invitationmodel.php and applications/dashboard/controllers/class.profilecontroller.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16412 
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16413 
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16416 
Cross-site request forgery (CSRF) vulnerability in my_profile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator's password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-03T19:00:00.000Z
CVE-2018-16417 
Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-30T16:26:32.000Z
CVE-2018-16418 
A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16419 
Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16420 
Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16421 
Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16422 
A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16423 
A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16424 
A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16425 
A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16426 
Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16427 
Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16428 
In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16429 
GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16430 
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16431 
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16432 
BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16435 
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16436 
Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T20:00:00.000Z
CVE-2018-16437 
Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T20:00:00.000Z
CVE-2018-16438 
An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T00:00:00.000Z
CVE-2018-16444 
An issue was discovered in SeaCMS 6.61. adm1n/admin_reslib.php has SSRF via the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T04:00:00.000Z
CVE-2018-16445 
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admin_topic_vod.php request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T04:00:00.000Z
CVE-2018-16446 
An issue was discovered in SeaCMS through 6.61. adm1n/admin_database.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting install_lock.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T04:00:00.000Z
CVE-2018-16447 
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T04:00:00.000Z
CVE-2018-16448 
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T04:00:00.000Z
CVE-2018-16449 
OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T04:00:00.000Z
CVE-2018-16450 
CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T04:00:00.000Z
CVE-2018-16451 
The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:57:34.000Z
CVE-2018-16452 
The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:58:44.000Z
CVE-2018-16453 
PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-04T21:00:00.000Z
CVE-2018-16454 
PHP Scripts Mall Currency Converter Script 2.0.5 allows remote attackers to cause a denial of service (web-interface change) via an inverted comma.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-07T22:00:00.000Z
CVE-2018-16455 
PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-04T21:00:00.000Z
CVE-2018-16456 
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-04T21:00:00.000Z
CVE-2018-16457 
PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/template_dp_dec2015/img directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-04T21:00:00.000Z
CVE-2018-16458 
An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-04T11:00:00.000Z
CVE-2018-16459 
An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Generic (CWE-79)
Affected products: vendor: https://github.com/guyonroche
product: exceljs
Published: 2018-09-06T13:00:00.000Z
CVE-2018-16460 
A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.
Problem types: cwe_id: CWE-77
description: Command Injection - Generic (CWE-77)
Affected products: vendor: https://github.com/UmbraEngineering
product: ps
Published: 2018-09-07T19:00:00.000Z
CVE-2018-16461 
A command injection vulnerability in libnmapp package for versions <0.4.16 allows arbitrary commands to be executed via arguments to the range options.
Problem types: cwe_id: CWE-77
description: Command Injection - Generic (CWE-77)
Affected products: vendor: n/a
product: libnmap
Published: 2018-10-30T21:00:00.000Z
CVE-2018-16462 
A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command execution through a maliciously crafted argument.
Problem types: cwe_id: CWE-77
description: Command Injection - Generic (CWE-77)
Affected products: vendor: n/a
product: apex-publish-static-files
Published: 2018-10-30T21:00:00.000Z
CVE-2018-16463 
A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.
Problem types: cwe_id: CWE-384
description: Session Fixation (CWE-384)
Affected products: vendor: n/a
product: Nextcloud Server
Published: 2018-10-30T21:00:00.000Z