rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-19792 
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified other impact by creating a symlink through which the openlitespeed program can be invoked with a long command name (involving ../ characters), which is mishandled in the LshttpdMain::getServerRootFromExecutablePath function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T06:00:00.000Z
CVE-2018-19793 
jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T06:00:00.000Z
CVE-2018-19794 
Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T06:00:00.000Z
CVE-2018-19795 
ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T06:00:00.000Z
CVE-2018-19796 
An open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to redirect a user via the lib/StepProcessing/step-processing.php (aka submissions download page) redirect parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T06:00:00.000Z
CVE-2018-19797 
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may cause a Denial of Service (application crash) via a crafted sass input file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T06:00:00.000Z
CVE-2018-19798 
Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidents_add.php?submit=1 URI, as demonstrated by the value_Images_1 field, which leads to remote command execution on the remote server. Any authenticated user can exploit this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T20:37:57.000Z
CVE-2018-19799 
Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-19800 
aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:38:27.000Z
CVE-2018-19801 
aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:37:38.000Z
CVE-2018-19802 
aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:35:47.000Z
CVE-2018-19809 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19810 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupMove.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19811 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19812 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SubFolderPackages.jsp" has reflected XSS via the GroupId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19813 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscribers.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19814 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscriptions.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19815 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19816 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/categorytree/ChooseCategory.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19817 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19818 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Contacts.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19819 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Rights.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19820 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Roles.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19821 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SecurityPolicies.jsp" has reflected XSS via the ConnPoolName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19822 
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T15:00:00.000Z
CVE-2018-19824 
In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T17:00:00.000Z
CVE-2018-19826 
In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quoted*) stack frame) may cause a Denial of Service via crafted sass input files with stray '&' or '/' characters. NOTE: Upstream comments indicate this issue is closed as "won't fix" and "works as intended" by design
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T19:00:00.000Z
CVE-2018-19827 
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T19:00:00.000Z
CVE-2018-19828 
Artica Integria IMS 5.0.83 has XSS via the search_string parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T18:00:00.000Z
CVE-2018-19829 
Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T22:00:00.000Z
CVE-2018-19830 
The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public (by default) and does not check the caller's identity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T15:06:32.000Z
CVE-2018-19831 
The ToOwner() function of a smart contract implementation for Cryptbond Network (CBN), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T15:06:41.000Z
CVE-2018-19832 
The NETM() function of a smart contract implementation for NewIntelTechMedia (NETM), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T15:06:37.000Z
CVE-2018-19833 
The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T15:06:46.000Z
CVE-2018-19834 
The quaker function of a smart contract implementation for BOMBBA (BOMB), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T15:06:29.000Z
CVE-2018-19835 
Metinfo 6.1.3 has reflected XSS via the admin/column/move.php lang_columnerr4 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T19:00:00.000Z
CVE-2018-19836 
In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows registering variables from the $_COOKIE value. This issue can, for example, be exploited in conjunction with CVE-2018-19835 to bypass many XSS filters such as the Chrome XSS filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-03T19:00:00.000Z
CVE-2018-19837 
In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19838 
In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone(), cloneChildren(), and copy().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19839 
In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19840 
The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19841 
The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19842 
getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19843 
opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19844 
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-31T15:00:00.000Z
CVE-2018-19845 
There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-31T15:00:00.000Z
CVE-2018-19849 
An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19853 
An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability (that allows control over the whole web site) via the admin.php/user/add URI because a storekeeper account (which is supposed to have only privileges for commodity management) can add an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T09:00:00.000Z
CVE-2018-19854 
An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker does not need a capability (however, the system must have the CONFIG_CRYPTO_USER kconfig option).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-04T16:00:00.000Z
CVE-2018-19855 
UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T12:56:14.000Z
CVE-2018-19856 
GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T15:50:42.000Z
CVE-2018-19857 
The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T11:00:00.000Z
CVE-2018-19858 
PrinceXML, versions 10 and below, is vulnerable to XXE due to the lack of protection against external entities. If an attacker passes HTML referencing an XML file (e.g., in an IFRAME element), PrinceXML will fetch the XML and parse it, thus giving an attacker file-read access and full-fledged SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-29T23:00:00.000Z
CVE-2018-19859 
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T11:00:00.000Z
CVE-2018-19860 
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T16:23:26.000Z
CVE-2018-19861 
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request.  NOTE: this product is discontinued.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2018-19862 
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request.  NOTE: this product is discontinued.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2018-19863 
An issue was discovered in 1Password 7.2.3.BETA before 7.2.3.BETA-3 on macOS. A mistake in error logging resulted in instances where sensitive data passed from Safari to 1Password could be logged locally on the user's machine. This data could include usernames and passwords that a user manually entered into Safari.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T15:00:00.000Z
CVE-2018-19864 
NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T11:00:00.000Z
CVE-2018-19865 
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T11:00:00.000Z
CVE-2018-19869 
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-19870 
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-19871 
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-19872 
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-15T22:00:00.000Z
CVE-2018-19873 
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-26T20:00:00.000Z
CVE-2018-19876 
cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T20:00:00.000Z
CVE-2018-19877 
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-05T21:00:00.000Z
CVE-2018-19878 
An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request, the application saves a session. A user can re-login without logging out, causing the application to store the session in memory. Exploitation of this vulnerability will increase memory use and consume free space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T15:21:22.000Z
CVE-2018-19879 
An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication functionality is not protected from automated tools used to make login attempts to the application. An anonymous attacker has the ability to make unlimited login attempts with an automated tool. This ability could lead to cracking a targeted user's password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T16:48:34.000Z
CVE-2018-19881 
In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service (recursive calls followed by a fitz/xml.c fz_xml_att crash from excessive stack consumption) via a crafted svg file, as demonstrated by mupdf-gl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T00:00:00.000Z
CVE-2018-19882 
In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dereference and application crash) via a crafted svg file, as demonstrated by mupdf-gl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T00:00:00.000Z
CVE-2018-19886 
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 8 case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T00:00:00.000Z
CVE-2018-19887 
An invalid memory address dereference was discovered in the huffcode function (libfaac/huff2.c) in Freeware Advanced Audio Coder (FAAC) 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 4 case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-06T00:00:00.000Z