rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-19701 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19702 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19703 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19704 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19705 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19706 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19707 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19708 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19709 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19710 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19711 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19712 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19713 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19714 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19715 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19716 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19717 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19718 
Adobe Connect versions 9.8.1 and earlier have a session token exposure vulnerability. Successful exploitation could lead to exposure of the privileges granted to a session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19719 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19720 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19721 
Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Note: A different vulnerability than CVE-2018-19723.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-28T22:00:00.000Z
CVE-2018-19722 
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19723 
Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Note: A different vulnerability than CVE-2018-19721.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-28T22:00:00.000Z
CVE-2018-19724 
Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Problem types: description: Stored Cross-site Scripting
Affected products: vendor: Adobe
product: Adobe Experience Manager Forms
Published: 2019-01-28T18:00:00.000Z
CVE-2018-19725 
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.
Problem types: description: Security bypass
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-03-05T20:00:00.000Z
CVE-2018-19726 
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Problem types: description: Stored Cross-site Scripting
Affected products: vendor: Adobe
product: Adobe Experience Manager
Published: 2019-01-28T18:00:00.000Z
CVE-2018-19727 
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Problem types: description: Reflected Cross-site Scripting
Affected products: vendor: Adobe
product: Adobe Experience Manager
Published: 2019-01-28T18:00:00.000Z
CVE-2018-19728 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-bounds read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-01-28T18:00:00.000Z
CVE-2018-19748 
app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&root= directory traversal. The value of the root parameter must be base64 encoded (note that base64 encoding, instead of URL encoding, is very rare in a directory traversal attack vector).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T21:00:00.000Z
CVE-2018-19749 
DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T22:00:00.000Z
CVE-2018-19750 
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T22:00:00.000Z
CVE-2018-19751 
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T22:00:00.000Z
CVE-2018-19752 
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T22:00:00.000Z
CVE-2018-19753 
Tarantella Enterprise before 3.11 allows Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T22:00:00.000Z
CVE-2018-19754 
Tarantella Enterprise before 3.11 allows bypassing Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T22:00:00.000Z
CVE-2018-19755 
There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service (out-of-bounds array access) because a certain conversion can result in a negative integer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19756 
There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19757 
There is a NULL pointer dereference at function sixel_helper_set_additional_message (status.c) in libsixel 1.8.2 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19758 
There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19759 
There is a heap-based buffer over-read at stb_image_write.h (function: stbi_write_png_to_mem) in libsixel 1.8.2 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19760 
cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19761 
There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19762 
There is a heap-based buffer overflow at fromsixel.c (function: image_buffer_resize) in libsixel 1.8.2 that will cause a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19763 
There is a heap-based buffer over-read at writer.c (function: write_png_to_file) in libsixel 1.8.2 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T03:00:00.000Z
CVE-2018-19765 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19766 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19767 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19768 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19769 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "UserProperties.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19770 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Users.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19771 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19772 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19773 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19774 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19775 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19777 
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrated by mutool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-30T09:00:00.000Z
CVE-2018-19782 
Multiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) c parameter or (2) a parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T23:00:00.000Z
CVE-2018-19783 
Kentix MultiSensor-LAN 5.63.00 devices and previous allow Authentication Bypass via an Alternate Path or Channel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T19:09:27.000Z
CVE-2018-19784 
The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-01T00:00:00.000Z
CVE-2018-19785 
PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-01T00:00:00.000Z
CVE-2018-19786 
HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T09:00:00.000Z
CVE-2018-19787 
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-02T10:00:00.000Z
CVE-2018-19788 
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T06:00:00.000Z
CVE-2018-19789 
An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1. When using the scalar type hint `string` in a setter method (e.g. `setName(string $name)`) of a class that's the `data_class` of a form, and when a file upload is submitted to the corresponding field instead of a normal text input, then `UploadedFile::__toString()` is called which will then return and disclose the path of the uploaded file. If combined with a local file inclusion issue in certain circumstances this could escalate it to a Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T22:00:00.000Z
CVE-2018-19790 
An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T22:00:00.000Z
CVE-2018-19791 
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header value beginning with the "bytes=0-,0-" substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T06:00:00.000Z