rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-20476 
An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php T_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T03:00:00.000Z
CVE-2018-20477 
An issue was discovered in S-CMS 3.0. It allows SQL Injection via the bank/callback1.php P_no field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T03:00:00.000Z
CVE-2018-20478 
An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameter with a mixed-case extension, as demonstrated by a DownName=download.Php value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T03:00:00.000Z
CVE-2018-20479 
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wap_index.php?type=newsinfo S_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T03:00:00.000Z
CVE-2018-20480 
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php P_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T03:00:00.000Z
CVE-2018-20481 
XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T04:00:00.000Z
CVE-2018-20482 
GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T18:00:00.000Z
CVE-2018-20483 
set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T18:00:00.000Z
CVE-2018-20484 
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T18:00:00.000Z
CVE-2018-20485 
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T18:00:00.000Z
CVE-2018-20486 
MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login_check.php url_array[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T19:00:00.000Z
CVE-2018-20487 
An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as root when the firewall changes are committed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T20:21:05.000Z
CVE-2018-20488 
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20489 
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20490 
An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20491 
An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20492 
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control (issue 2 of 6).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T16:44:43.000Z
CVE-2018-20493 
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20494 
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20495 
An issue was discovered in GitLab Community and Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20496 
An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20497 
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20498 
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20499 
An issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20500 
An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was a security risk if one of the maintainers leaves the group and they know the token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T15:18:18.000Z
CVE-2018-20501 
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20502 
An issue was discovered in Bento4 1.5.1-627. There is an attempt at excessive memory allocation in the AP4_DataBuffer class when called from AP4_HvccAtom::Create in Core/Ap4HvccAtom.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T23:00:00.000Z
CVE-2018-20503 
Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-07T18:25:28.000Z
CVE-2018-20505 
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-03T17:51:41.000Z
CVE-2018-20506 
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-03T17:50:54.000Z
CVE-2018-20507 
An issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-30T21:24:28.000Z
CVE-2018-20508 
CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-27T13:00:00.000Z
CVE-2018-20509 
The print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref *desc *node" lines in a debugfs file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-30T17:06:17.000Z
CVE-2018-20510 
The print_binder_transaction_ilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "*from *code *flags" lines in a debugfs file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-30T17:12:38.000Z
CVE-2018-20511 
An issue was discovered in the Linux kernel before 4.18.11. The ipddp_ioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAP_NET_ADMIN to read the ipddp_route dev and next fields via an SIOCFINDIPDDPRT ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-27T14:00:00.000Z
CVE-2018-20512 
EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2018-20519 
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajax_save_basic pid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-27T15:00:00.000Z
CVE-2018-20520 
MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-27T15:00:00.000Z
CVE-2018-20523 
Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleartext browser history via an app.provider.query content://com.android.browser.searchhistory/searchhistory request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T15:36:55.000Z
CVE-2018-20524 
The Chat Anywhere extension 2.4.0 for Chrome allows XSS via crafted use of <<a> in a message, because a danmuWrapper DIV element in chatbox-only\danmu.js is outside the scope of a Content Security Policy (CSP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-27T17:00:00.000Z
CVE-2018-20525 
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T15:21:12.000Z
CVE-2018-20526 
Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T15:25:18.000Z
CVE-2018-20528 
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-27T18:00:00.000Z
CVE-2018-20530 
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-27T18:00:00.000Z
CVE-2018-20532 
There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20533 
There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20534 
There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20535 
There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number increment attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20536 
There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20537 
There is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20538 
There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20539 
There is a Segmentation fault triggered by illegal address access at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20540 
There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20541 
There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20542 
There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 (which is in a different part of the source code and is seen at a different address).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20543 
There is an attempted excessive memory allocation at libxsmm_sparse_csc_reader in generator_spgemm_csc_reader.c in LIBXSMM 1.10 that will cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20544 
There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20545 
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20546 
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20547 
There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20548 
There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20549 
There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T03:00:00.000Z
CVE-2018-20551 
A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T04:00:00.000Z
CVE-2018-20552 
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T13:00:00.000Z
CVE-2018-20553 
Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T13:00:00.000Z
CVE-2018-20555 
The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T15:32:40.000Z
CVE-2018-20556 
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T15:43:48.000Z
CVE-2018-20557 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20558 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20559 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20560 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20561 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20562 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20563 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20564 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20565 
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20566 
An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20567 
An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20568 
Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20569 
user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z
CVE-2018-20570 
jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-28T15:00:00.000Z