rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-0563 
Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
product: the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0564 
Session fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3..4, EC-CUBE 3.0.5, EC-CUBE 3.0.6, EC-CUBE 3.0.7, EC-CUBE 3.0.8, EC-CUBE 3.0.9, EC-CUBE 3.0.10, EC-CUBE 3.0.11, EC-CUBE 3.0.12, EC-CUBE 3.0.12-p1, EC-CUBE 3.0.13, EC-CUBE 3.0.14, EC-CUBE 3.0.15) allows remote attackers to perform arbitrary operations via unspecified vectors.
Problem types: description: Session fixation
Affected products: vendor: LOCKON CO.,LTD.
product: EC-CUBE
Published: 2018-04-20T13:00:00.000Z
CVE-2018-0565 
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0566 
Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0567 
Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0568 
Unrestricted file upload vulnerability in SiteBridge Inc. Joruri Gw Ver 3.2.0 and earlier allows remote authenticated users to execute arbitrary PHP code via unspecified vectors.
Problem types: description: Unrestricted file upload vulnerability
Affected products: vendor: SiteBridge Inc.
product: Joruri Gw
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0569 
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0570 
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0571 
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.
Problem types: description: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0572 
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0573 
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0574 
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0575 
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0576 
Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: NetWebLogic
product: Events Manager
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0577 
Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Flipper Code
product: WP Google Map Plugin
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0578 
Cross-site scripting vulnerability in PixelYourSite plugin prior to version 5.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Minimal Work SRL
product: PixelYourSite
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0579 
Cross-site scripting vulnerability in Open Graph for Facebook, Google+ and Twitter Card Tags plugin prior to version 2.2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Webdados
product: Open Graph for Facebook, Google+ and Twitter Card Tags
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0580 
Untrusted search path vulnerability in CELSYS, Inc CLIP STUDIO series (CLIP STUDIO PAINT (for Windows) EX/PRO/DEBUT Ver.1.7.3 and earlier, CLIP STUDIO ACTION (for Windows) Ver.1.5.5 and earlier, with its timestamp prior to April 25, 2018, 12:11:31, and CLIP STUDIO MODELER (for Windows) Ver.1.6.3 and earlier, with its timestamp prior to April 25, 2018, 17:02:49) allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: CELSYS, Inc.
product: CLIP STUDIO series
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0581 
Cross-site scripting vulnerability in ASUS RT-AC87U Firmware version prior to 3.0.0.4.378.9383 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: ASUS Japan Inc.
product: RT-AC87U
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0582 
Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: ASUS Japan Inc.
product: RT-AC68U
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0583 
Cross-site scripting vulnerability in ASUS RT-AC1200HP Firmware version prior to 3.0.0.4.380.4180 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: ASUS Japan Inc.
product: RT-AC1200HP
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0584 
IIJ SmartKey App for Android version 2.1.0 and earlier allows remote attackers to bypass authentication [effect_of_bypassing_authentication] via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: Internet Initiative Japan Inc.
product: IIJ SmartKey App for Android
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0585 
Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Ultimate Member
product: Ultimate Member
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0586 
Directory traversal vulnerability in the shortcodes function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Ultimate Member
product: Ultimate Member
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0587 
Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via unspecified vectors.
Problem types: description: Unrestricted file upload vulnerability
Affected products: vendor: Ultimate Member
product: Ultimate Member
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0588 
Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Ultimate Member
product: Ultimate Member
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0589 
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new form in the 'Forms' page via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Ultimate Member
product: Ultimate Member
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0590 
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Ultimate Member
product: Ultimate Member
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0591 
The KINEPASS App for Android Ver 3.1.1 and earlier, and for iOS Ver 3.1.2 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: T-JOY CO.,LTD.
product: KINEPASS App
Published: 2018-05-14T13:00:00.000Z
CVE-2018-0592 
Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Microsoft
product: Microsoft OneDrive
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0593 
Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Microsoft
product: The installer of Microsoft OneDrive
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0594 
Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Microsoft
product: Skype for Windows
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0595 
Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Microsoft
product: The installer of Skype for Windows
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0596 
Untrusted search path vulnerability in the installer of Visual Studio Community allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Microsoft
product: The installer of Visual Studio Community
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0597 
Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Microsoft
product: The installer of Visual Studio Code
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0598 
Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Microsoft
product: Self-extracting archive files created by IExpress bundled with Microsoft Windows
Published: 2018-06-26T00:00:00.000Z
CVE-2018-0599 
Untrusted search path vulnerability in the installer of Visual C++ Redistributable allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Microsoft
product: The installer of Visual C++ Redistributable
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0600 
Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sony Corporation
product: the installer of PlayMemories Home for Windows
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0601 
Untrusted search path vulnerability in axpdfium v0.01 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Yasutaka ATARASHI
product: axpdfium
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0602 
Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: icegram
product: Email Subscribers & Newsletters
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0603 
Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Gemini Labs
product: Site Reviews
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0604 
Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors.
Problem types: description: Remote code execution
Affected products: vendor: Pixelpost.org
product: Pixelpost
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0605 
Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Pixelpost.org
product: Pixelpost
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0606 
SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Pixelpost.org
product: Pixelpost
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0607 
SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0608 
Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: Kazuho Oku
product: H2O
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0609 
Untrusted search path vulnerability in LINE for Windows versions before 5.8.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0610 
Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information.
Problem types: description: Local file inclusion vulnerability
Affected products: vendor: Zenphoto
product: Zenphoto
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0611 
The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: ALL NIPPON AIRWAYS CO., LTD
product: ANA App for iOS
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0612 
Cross-site scripting vulnerability in 5000 trillion yen converter v1.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Owen
product: 5000 trillion yen converter
Published: 2018-06-26T14:00:00.000Z
CVE-2018-0613 
NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote authenticated attackers to bypass access restriction to conduct arbitrary operations with administrative privilege via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: NEC Platforms, Ltd.
product: Calsos CSDX and CSDJ series products
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0614 
Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: NEC Platforms, Ltd.
product: Calsos CSDX and CSDJ series products
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0617 
Directory traversal vulnerability in ChamaNet MemoCGI v2.1800 to v2.2200 allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: ChamaNet
product: MemoCGI
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0618 
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: GNU Mailman
product: Mailman
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0619 
Untrusted search path vulnerability in the installer of Glarysoft Glary Utilities (Glary Utilities 5.99 and earlier and Glary Utilities Pro 5.99 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Glarysoft Ltd.
product: Installer of Glary Utilities
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0620 
Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Logicool Co Ltd.
product: the installer of LOGICOOL Game Software
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0621 
Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30.9 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Logicool Co Ltd.
product: the installer of LOGICOOL CONNECTION UTILITY SOFTWARE
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0622 
The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: DHC Corporation
product: DHC Online Shop App for Android
Published: 2018-07-26T17:00:00.000Z
CVE-2018-0623 
Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver. 20.0.2 and earlier, and Yayoi Kokyaku Kanri 17 Ver.11.0.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of msjet49.dll loaded by the vulnerable products.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Yayoi Co., Ltd.
product: Multiple Yayoi 17 Series products
Published: 2018-09-07T14:00:00.000Z
CVE-2018-0624 
Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver.20.0.2 and earlier, and Yayoi Kokyaku Kanri 17 Ver.11.0.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of ykkapi.dll loaded by the vulnerable products.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Yayoi Co., Ltd.
product: Multiple Yayoi 17 Series products
Published: 2018-09-07T14:00:00.000Z
CVE-2018-0625 
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter.
Problem types: description: OS Command Injection
Affected products: vendor: NEC Corporation
product: WG1200HP
Published: 2019-01-09T22:00:00.000Z
CVE-2018-0626 
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter.
Problem types: description: OS Command Injection
Affected products: vendor: NEC Corporation
product: WG1200HP
Published: 2019-01-09T22:00:00.000Z