rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-19586 
Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered during file uploads because core/webapi/upload/FileUploadData.java mishandles a StringUtil.java call. This vulnerability enables regular users to write arbitrary files on the underlying system with privileges of the user running the application. Especially, an attacker may leverage the vulnerability to write an executable JSP file in an exposed web directory to execute commands on the underlying system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T17:38:30.000Z
CVE-2018-19587 
In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T07:00:00.000Z
CVE-2018-19588 
Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-11T18:50:46.000Z
CVE-2018-19589 
Incorrect Access Controls of Security Officer (SO) in PKCS11 R2 provider that ships with the Utimaco CryptoServer HSM product package allows an SO authenticated to a slot to retrieve attributes of keys marked as private keys in external key storage, and also delete keys marked as private keys in external key storage. This compromises the availability of all keys configured with external key storage and may result in an economic attack in which the attacker denies legitimate users access to keys while maintaining possession of an encrypted copy (blob) of the external key store for ransom. This attack has been dubbed reverse ransomware attack and may be executed via a physical connection to the CryptoServer or remote connection if SSH or remote access to LAN CryptoServer has been compromised. The Confidentiality and Integrity of the affected keys, however, remain untarnished.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T16:50:58.000Z
CVE-2018-19591 
In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T16:00:00.000Z
CVE-2018-19592 
The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\SYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-27T15:04:17.000Z
CVE-2018-19595 
PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an index.php/list/5/?current={pboot:if(evAl($_GET[a]))}1{/pboot:if}&a=phpinfo(); URI, because of an incorrect apps\home\controller\ParserController.php parserIfLabel protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T07:00:00.000Z
CVE-2018-19596 
Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T19:00:00.000Z
CVE-2018-19597 
CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T19:00:00.000Z
CVE-2018-19598 
Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T19:00:00.000Z
CVE-2018-19599 
Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T19:45:40.000Z
CVE-2018-19600 
Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T20:00:00.000Z
CVE-2018-19601 
Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T20:00:00.000Z
CVE-2018-19607 
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T07:00:00.000Z
CVE-2018-19608 
Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T22:00:00.000Z
CVE-2018-19609 
ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T16:00:00.000Z
CVE-2018-19612 
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:44:34.000Z
CVE-2018-19613 
Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:42:19.000Z
CVE-2018-19614 
XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T19:16:12.000Z
CVE-2018-19615 
Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâs web browser to gain access to the affected device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-19616 
An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access control is implemented on the client side via a disabled attribute for a BUTTON element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-19620 
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-28T08:00:00.000Z
CVE-2018-19621 
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-28T08:00:00.000Z
CVE-2018-19622 
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T04:00:00.000Z
CVE-2018-19623 
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. This was addressed in epan/dissectors/packet-lbmpdm.c by disallowing certain negative values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T04:00:00.000Z
CVE-2018-19624 
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T04:00:00.000Z
CVE-2018-19625 
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T04:00:00.000Z
CVE-2018-19626 
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T04:00:00.000Z
CVE-2018-19627 
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T04:00:00.000Z
CVE-2018-19628 
In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T04:00:00.000Z
CVE-2018-19629 
A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server before 7.1.5 allows an attacker to crash the service via a TCP connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-16T13:51:56.000Z
CVE-2018-19630 
cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-28T10:00:00.000Z
CVE-2018-19634 
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: CA Technologies
product: CA Service Desk Manager
Published: 2019-01-22T15:00:00.000Z
CVE-2018-19635 
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface.
Problem types: cwe_id: CWE-269
description: CWE-269
Affected products: vendor: CA Technologies
product: CA Service Desk Manager
Published: 2019-01-22T15:00:00.000Z
CVE-2018-19636 Local root exploit via inclusion of attacker controlled shell script
Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: SUSE
product: supportutils
Credits: lang: en
value: Vítězslav Čížek of SUSE
Published: 2019-03-05T16:00:00.000Z
CVE-2018-19637 Static temporary filename allows overwriting of files
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection
Problem types: cwe_id: CWE-377
description: CWE-377
Affected products: vendor: SUSE
product: supportutils
Credits: lang: en
value: Vítězslav Čížek of SUSE
Published: 2019-03-05T16:00:00.000Z
CVE-2018-19638 User can overwrite arbitrary log files in support tar
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.
Problem types: cwe_id: CWE-377
description: CWE-377
Affected products: vendor: SUSE
product: supportutils
Credits: lang: en
value: Johannes Segitz of SUSE
Published: 2019-03-05T16:00:00.000Z
CVE-2018-19639 Code execution if run with command line switch -v
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: SUSE
product: supportutils
Credits: lang: en
value: Johannes Segitz of SUSE
Published: 2019-03-05T16:00:00.000Z
CVE-2018-19640 Code execution if run with command line switch -v
If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.
Problem types: cwe_id: CWE-377
description: CWE-377
Affected products: vendor: SUSE
product: supportutils
Credits: lang: en
value: Johannes Segitz of SUSE
Published: 2019-03-05T16:00:00.000Z
CVE-2018-19641 Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5
Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
Problem types: description: Unauthenticated remote code execution
Affected products: vendor: Micro Focus
product: Solutions Business Manager (SBM)
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2019-03-27T16:42:08.179Z
CVE-2018-19642 Solutions Business Manager (SBM) Denial of Service issue in version prior to 11.5
Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
Problem types: description: denial of service
Affected products: vendor: Micro Focus
product: Solutions Business Manager (SBM)
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2019-03-27T16:55:13.340Z
CVE-2018-19643 Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5
Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
Problem types: description: Information Leakage
Affected products: vendor: Micro Focus
product: Solutions Business Manager (SBM)
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2019-03-27T17:13:45.549Z
CVE-2018-19644 Solutions Business Manager (SBM) reflected cross site script issue in version prior to 11.5
Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
Problem types: description: reflected cross site script
Affected products: vendor: Micro Focus
product: Solutions Business Manager (SBM)
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2019-03-27T17:07:17.697Z
CVE-2018-19645 Solutions Business Manager (SBM) Authentication Bypass Issue in Version prior to 11.5
An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
Problem types: description: Authentication Bypass
Affected products: vendor: NetIQ eDirectory
product: NetIQ Access Manager (NAM)
Credits: lang: en
value: Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.
Published: 2019-02-12T20:00:00.000Z
CVE-2018-19646 
The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands because command-line arguments are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-28T17:00:00.000Z
CVE-2018-19648 
An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management (NACM) allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T20:04:15.000Z
CVE-2018-19649 
XSS exists in InfoVista VistaPortal SE Version 5.1 (build 51029). VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19650 
Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002000 by the IRPFile.sys Antiy-AVL ATool kernel driver. The bug is caused by failure to properly validate the length of the user-supplied data, which results in a kernel stack buffer overflow. An attacker can leverage this vulnerability to execute arbitrary code in the context of the kernel, which could lead to privilege escalation and a failed exploit could lead to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T22:00:00.000Z
CVE-2018-19651 
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-28T22:00:00.000Z
CVE-2018-19653 
HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-09T19:00:00.000Z
CVE-2018-19654 
An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a duplicate username, as demonstrated by use of the test%c2 string when a test account already exists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T05:00:00.000Z
CVE-2018-19655 
A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T05:00:00.000Z
CVE-2018-19658 
The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T19:49:45.000Z
CVE-2018-19659 
An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/net_WebPingGetValue can result in running OS commands as the root user. This is similar to CVE-2017-12120.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-19660 
An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/webSettingProfileSecurity can result in running OS commands as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-19661 
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T07:00:00.000Z
CVE-2018-19662 
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T07:00:00.000Z
CVE-2018-19664 
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T07:00:00.000Z
CVE-2018-19665 
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T23:00:00.000Z
CVE-2018-19666 
The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T07:00:00.000Z
CVE-2018-19692 
An issue was discovered in tp5cms through 2017-05-25. admin.php/upload/picture.html allows remote attackers to execute arbitrary PHP code by uploading a .php file with the image/jpeg content type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T18:00:00.000Z
CVE-2018-19693 
An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T18:00:00.000Z
CVE-2018-19694 
HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:59:02.000Z
CVE-2018-19698 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19699 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z
CVE-2018-19700 
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-18T17:00:00.000Z