rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-11140 
The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, an error-based type).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11141 
The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management Virtual Appliance 8.0.318 can be abused to write and delete files respectively via Directory Traversal. Files can be at any location where the 'www' user has write permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11142 
The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T18:00:00.000Z
CVE-2018-11143 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11144 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11145 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11146 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11147 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11148 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11149 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11150 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11151 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 9 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11152 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11153 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11154 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11155 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11156 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11157 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11158 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11159 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11160 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11161 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11162 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11163 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 21 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11164 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11165 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11166 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11167 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11168 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11169 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11170 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11171 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11172 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11173 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11174 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11175 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11176 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11177 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11178 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11179 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11180 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11181 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11182 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11183 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11184 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11185 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11186 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11187 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11188 
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11189 
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11190 
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11191 
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11192 
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11193 
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11194 
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T21:00:00.000Z
CVE-2018-11195 
Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have logged in, to potentially gain access to their Mahara credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T19:00:00.000Z
CVE-2018-11196 
Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected files into a Leap2A archive and uploading that to Mahara. In contrast to other ZIP files that are uploaded, ClamAV (when activated) does not check Leap2A archives for viruses, allowing malicious files to be available for download. While files cannot be executed on Mahara itself, Mahara can be used to transfer such files to user computers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T19:00:00.000Z
CVE-2018-11198 
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-06T20:15:44.000Z
CVE-2018-11200 
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T17:59:50.000Z
CVE-2018-11202 
A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T15:00:00.000Z
CVE-2018-11203 
A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T15:00:00.000Z
CVE-2018-11204 
A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T15:00:00.000Z
CVE-2018-11205 
A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T15:00:00.000Z
CVE-2018-11206 
An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T00:00:00.000Z
CVE-2018-11207 
A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T15:00:00.000Z
CVE-2018-11208 
An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type of XSS by a user with the admin privilege
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T15:00:00.000Z
CVE-2018-11209 
An issue was discovered in Z-BlogPHP 2.0.0. zb_system/cmd.php?act=verify relies on MD5 for the password parameter, which might make it easier for attackers to bypass intended access restrictions via a dictionary or rainbow-table attack. NOTE: the vendor declined to accept this as a valid issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T15:00:00.000Z
CVE-2018-11210 
TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T15:00:00.000Z
CVE-2018-11212 
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T17:00:00.000Z
CVE-2018-11213 
An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T17:00:00.000Z
CVE-2018-11214 
An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-16T17:00:00.000Z
CVE-2018-11215 
Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:46:08.000Z
CVE-2018-11218 
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T17:00:00.000Z
CVE-2018-11219 
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-17T17:00:00.000Z
CVE-2018-11220 
Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-31T15:00:00.000Z
CVE-2018-11221 
Unauthenticated untrusted file upload in Artica Pandora FMS through version 7.23 allows an attacker to upload an arbitrary plugin via include/ajax/update_manager.ajax in the update system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T21:00:00.000Z
CVE-2018-11222 
Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.php ajax endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T21:00:00.000Z
CVE-2018-11223 
XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=" call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-15T21:00:00.000Z
CVE-2018-11224 
An issue was discovered in Libav 12.3. A read access violation in the in_table_init16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T04:00:00.000Z
CVE-2018-11225 
The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T04:00:00.000Z
CVE-2018-11226 
The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T04:00:00.000Z
CVE-2018-11227 
Monstra CMS 3.0.4 and earlier has XSS via index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T15:42:58.000Z
CVE-2018-11228 
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol (CTP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T01:00:00.000Z
CVE-2018-11229 
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via command injection in Crestron Toolbox Protocol (CTP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T01:00:00.000Z
CVE-2018-11230 
jbig2_add_page in jbig2enc.cc in libjbig2enc.a in jbig2enc 0.29 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-17T12:00:00.000Z
CVE-2018-11231 
In the Divido plugin for OpenCart, there is SQL injection. Attackers can use SQL injection to get some confidential information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-23T16:00:00.000Z
CVE-2018-11232 
The etm_setup_aux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4.10.2 allows attackers to cause a denial of service (panic) because a parameter is incorrectly used as a local variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-18T04:00:00.000Z
CVE-2018-11233 
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-30T04:00:00.000Z