rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-14394 
libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T05:00:00.000Z
CVE-2018-14395 
libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T05:00:00.000Z
CVE-2018-14396 
An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billing_address-address, billing_address-zipcode, billing_address-city, billing_address-department, shipping_address-address, shipping_address-zipcode, shipping_address-city, and shipping_address-department parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-07T22:00:00.000Z
CVE-2018-14397 
An issue was discovered in Creme CRM 1.6.12. The organization creation page is affected by 9 stored cross-site scripting vulnerabilities involving the name, billing_address-address, billing_address-zipcode, billing_address-city, billing_address-department, shipping_address-address, shipping_address-zipcode, shipping_address-city, and shipping_address-department parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-07T22:00:00.000Z
CVE-2018-14398 
An issue was discovered in Creme CRM 1.6.12. The value of the cancel button uses the content of the HTTP Referer header, and could be used to trick a user into visiting a fake login page in order to steal credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-07T22:00:00.000Z
CVE-2018-14399 
libs\classes\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute arbitrary PHP code via a .txt?.php#.jpg URI in the SRC attribute of an IMG element within info[content] JSON data to the index.php?m=member&c=index&a=register URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T05:00:00.000Z
CVE-2018-14401 
CopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T05:00:00.000Z
CVE-2018-14402 
axmldec 1.2.0 has an out-of-bounds write in the jitana::axml_parser::parse_start_namespace function in lib/jitana/util/axml_parser.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T05:00:00.000Z
CVE-2018-14403 
MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T00:00:00.000Z
CVE-2018-14404 
A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T13:00:00.000Z
CVE-2018-14415 
An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T18:00:00.000Z
CVE-2018-14417 
A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize the 'recentVersion' parameter from the snserv endpoint, allowing an unauthenticated attacker to execute arbitrary commands with root permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T16:00:00.000Z
CVE-2018-14418 
In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T18:00:00.000Z
CVE-2018-14419 
MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T18:00:00.000Z
CVE-2018-14420 
MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?anyid=47&n=admin&c=admin_admin&a=doaddsave URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T18:00:00.000Z
CVE-2018-14421 
SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v&#95;pic) to /admin/admin_video.php (aka /backend/admin_video.php). The code is executed by visiting /details/index.php. This can also be exploited through CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T18:00:00.000Z
CVE-2018-14422 
blog/index.php in SansCMS 0.7 has XSS via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T18:00:00.000Z
CVE-2018-14423 
Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-19T19:00:00.000Z
CVE-2018-14424 
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-14T16:00:00.000Z
CVE-2018-14425 
There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T17:07:11.000Z
CVE-2018-14429 
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-14T16:00:00.000Z
CVE-2018-14430 
The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fw_data [id][1], fw_data [id][2], fw_data [id][3], fw_data [id][4], or email field of the contact form, exploitable with an fw_send_email action to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-25T23:00:00.000Z
CVE-2018-14432 
In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all projects in the deployment and their attributes. Only Keystone with the /v3/OS-FEDERATION endpoint enabled via policy.json is affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z
CVE-2018-14434 
ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14435 
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14436 
ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14437 
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14438 
In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14439 
espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which might allow attackers to trigger currency transfers of unintended amounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14440 
An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageAction_queryNotice.action noticeInfo parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14441 
An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadAction_fileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14442 
Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T12:00:00.000Z
CVE-2018-14443 
get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T13:00:00.000Z
CVE-2018-14444 
libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T13:00:00.000Z
CVE-2018-14445 
In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T13:00:00.000Z
CVE-2018-14446 
MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T00:00:00.000Z
CVE-2018-14447 
trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T13:00:00.000Z
CVE-2018-14448 
Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T13:00:00.000Z
CVE-2018-14449 
An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14450 
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "update dimension region's chunks" feature of the function gig::Region::UpdateChunks in gig.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14451 
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIFF.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14452 
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first dimension region of this region" feature of the function gig::Region::UpdateChunks in gig.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14453 
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store16 in helper.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14454 
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14455 
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store32 in helper.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14456 
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14457 
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14458 
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store32 in helper.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14459 
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store16 in helper.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14460 
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T15:00:00.000Z
CVE-2018-14461 
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:09:53.000Z
CVE-2018-14462 
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:11:19.000Z
CVE-2018-14463 
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:12:23.000Z
CVE-2018-14464 
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:13:31.000Z
CVE-2018-14465 
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:15:01.000Z
CVE-2018-14466 
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:22:55.000Z
CVE-2018-14467 
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:24:35.000Z
CVE-2018-14468 
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:27:45.000Z
CVE-2018-14469 
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:29:17.000Z
CVE-2018-14470 
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:31:18.000Z
CVE-2018-14471 
dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference and SEGV) via a crafted dwg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T16:00:00.000Z
CVE-2018-14472 
An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin/goods.php. The $keywords parameter is taken directly into execution without any filtering, leading to SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T16:00:00.000Z
CVE-2018-14473 
OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attacker sending a crafted HTTP request in order to exfiltrate information or cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T16:00:00.000Z
CVE-2018-14474 
views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-20T18:00:00.000Z
CVE-2018-14476 
GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T15:18:52.000Z
CVE-2018-14478 
ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-07T17:41:50.000Z
CVE-2018-14481 
Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2018-14485 
BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-07T17:47:36.000Z
CVE-2018-14486 
DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:14:53.000Z
CVE-2018-14492 
Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-21T12:00:00.000Z
CVE-2018-14493 
Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-25T23:00:00.000Z
CVE-2018-14494 
Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. NOTE: the vendor sent a clarification on 2019-09-17 explaining that, although this CVE was first populated in July 2019, it is a historical vulnerability that does not apply to any current or recent Vivotek hardware or firmware
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T12:56:42.000Z
CVE-2018-14495 
Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE-2018-14494. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T13:20:18.000Z
CVE-2018-14496 
Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_buff_4326, and set_getparam.cgi. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T13:25:23.000Z
CVE-2018-14497 
Tenda D152 ADSL routers allow XSS via a crafted SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T16:00:00.000Z
CVE-2018-14498 
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2018-14499 
An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2018-14500 
joyplus-cms 1.6.0 has XSS via the manager/collect/collect_vod_zhuiju.php keyword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-22T17:00:00.000Z
CVE-2018-14501 
manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-22T17:00:00.000Z
CVE-2018-14502 
controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T12:45:15.000Z
CVE-2018-14503 
Cross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-10T16:00:00.000Z
CVE-2018-14504 
An issue was discovered in manage_filter_edit_page.php in MantisBT 2.x through 2.15.0. A cross-site scripting (XSS) vulnerability in the Edit Filter page allows execution of arbitrary code (if CSP settings permit it) when displaying a filter with a crafted name (e.g., 'foobar" onclick="alert(1)').
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T18:00:00.000Z