yahoo-inc/cve-impacts huggingface dataset:
CVE-2018-20797: An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPredictorDecoder in base/PdfFiltersPrivate.cpp.
Key phrases: excessive memory allocation
CVE-2018-20798: The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions.
Key phrases: bypass intended access restrictions
CVE-2018-20799: In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior does not match the sshguard documentation), which might make it easier for attackers to bypass intended access restrictions.
Key phrases: bypass intended access restrictions
CVE-2018-20800: An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major updates) will experience data loss in their agent preferences table.
Key phrases: data loss
CVE-2018-20801: In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS.
Key phrases: backtracking regular expressions, denial of service
CVE-2018-20802: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects: MongoDB Inc. MongoDB Server v3.6 versions prior to 3.6.9, v4.0 versions prior to 4.0.3.
Key phrases: denial of service
CVE-2018-20803: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.5; v3.6 versions prior to 3.6.10; v3.4 versions prior to 3.4.19.
Key phrases: denial of service
CVE-2018-20804: A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.10; v3.6 versions prior to 3.6.13.
Key phrases: denial of service
CVE-2018-20805: A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.5; v3.6 versions prior to 3.6.10. This issue affects: MongoDB Inc. MongoDB Server 3.6 versions prior to 3.6.10; 4.0 versions prior to 4.0.5.
Key phrases: denial of service, $elemmatch
CVE-2018-20806: Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).
Key phrases: XSS via the login page (the /public, xss
CVE-2018-20807: An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly.
Key phrases: xss issue
CVE-2018-20808: An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX.
Key phrases: xss issue
CVE-2018-20809: A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.
Key phrases: crash
CVE-2018-20810: Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices.
CVE-2018-20811: A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12.
Key phrases: rpc service issue
CVE-2018-20812: An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack (IPv4/IPv6) endpoints.
Key phrases: information exposure issue
CVE-2018-20813: An input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2.
Key phrases: input validation issue
CVE-2018-20814: An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX or PPS 5.2RX.
Key phrases: xss issue
CVE-2018-20815: In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
Key phrases: buffer overflow risk
CVE-2018-20816: An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with script executed.
Key phrases: xss, csrf, cookie stealing, session hijacking, malicious
CVE-2018-20817: SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a buffer, which allows one to execute code on the remote target machine when sending a steam authentication request. This affects Call of Duty: Modern Warfare 2, Call of Duty: Modern Warfare 3, Call of Duty: Ghosts, Call of Duty: Advanced Warfare, Call of Duty: Black Ops 1, and Call of Duty: Black Ops 2.
Key phrases: execute code on the remote target machine when
CVE-2018-20818: A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO() function, which can cause a runtime crash of the PLC or possibly have unspecified other impact.
Key phrases: buffer overflow, unspecified other impact, crash, unspecified impact
CVE-2018-20819: io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact by crafting a jpg image file. The root cause is a missing check of header payloads that may be (incorrectly) larger than the maximum file size.
Key phrases: denial of service (heap-based buffer overflow and application crash), cause a denial of service (heap-, unspecified other impact, heap based buffer overflow, unspecified impact
CVE-2018-20820: read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.
Key phrases: cause a denial-of-service (, integer overflow, denial of service, crash
CVE-2018-20821: The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse_css_variable_value in parser.cpp).
Key phrases: cause a denial-of-service (, uncontrolled recursion, denial of service
CVE-2018-20822: LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp).
Key phrases: cause a denial-of-service (, uncontrolled recursion, denial of service
CVE-2018-20823: The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEMS ultrasound attack.
Key phrases: denial of service (resonance and false data), cause a denial of service (resonance and, mems ultrasound
CVE-2018-20824: The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.
Key phrases: inject arbitrary HTML or JavaScript, inject arbitrary HTML or JavaScript via a cross, cross site scripting (xss), arbitrary html
CVE-2018-20826: The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check.
Key phrases: set the reporter in issues via a missing, missing authorisation check
CVE-2018-20827: The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the country parameter.
Key phrases: inject arbitrary HTML or JavaScript, inject arbitrary HTML or JavaScript via a cross, cross site scripting (xss), arbitrary html
CVE-2018-20834: A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content. A patch has been applied to node-tar v2.2.2).
Key phrases: arbitrary file overwrite
CVE-2018-20835: A vulnerability was found in tar-fs before 1.16.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.
Key phrases: arbitrary file overwrite
CVE-2018-20836: An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
Key phrases: race condition, use-after-free, use after free
CVE-2018-20837: include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.
Key phrases: xss
CVE-2018-20838: ampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.
Key phrases: stored XSS, stored xss
CVE-2018-20839: systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.
Key phrases: read cleartext passwords in certain circumstances
CVE-2018-20840: An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of misinterpretation of an integer as a string, resulting in denial-of-service and then other users can no longer login/sign-in to the affected third-party service. Once this third-party service uses Google Sign-In with google-api-cpp-client, a malicious user can trigger this client/auth/oauth2_authorization.cc vulnerability by requesting the client to receive the ID token from a Google authentication server.
Key phrases: unhandled exception, outage, denial-of-service, denial of service
CVE-2018-20841: HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mac_table request.
Key phrases: remote command execution via shell metacharacters in the
CVE-2018-20843: In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
Key phrases: xml input, xml names, denial of service
CVE-2018-20845: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
Key phrases: denial of service (application crash), cause a denial of service (application crash, division-by-zero
CVE-2018-20846: Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
Key phrases: denial of service (application crash), cause a denial of service (application crash, out-of-bounds accesses, out of bounds access
CVE-2018-20847: An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.
Key phrases: integer overflow
CVE-2018-20848: Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter.
Key phrases: csrf, xss payload
CVE-2018-20849: Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.
Key phrases: xss
CVE-2018-20850: Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server.
Key phrases: self-xss
CVE-2018-20851: Helpy before 2.2.0 allows agents to edit admins.
Key phrases: edit admins
CVE-2018-20852: http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.
Key phrases: steal cookie
CVE-2018-20853: An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks.
Key phrases: spam
CVE-2018-20854: An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error with a resultant ctrl->phys out-of-bounds read.
Key phrases: ctrl->phys out-of-bounds read, out of bounds read
CVE-2018-20855: An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.
Key phrases: leak of stack memory
CVE-2018-20856: An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-after-free because a certain error case is mishandled.
Key phrases: use-after-free, use after free
CVE-2018-20857: Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain name.
Key phrases: an XML nodes comment attack such as a, xml nodes comment
CVE-2018-20858: Recommender before 2018-07-18 allows XSS.
Key phrases: XSS, xss
CVE-2018-20859: edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.
Key phrases: a Chemical Equation advanced problem, xss
CVE-2018-20860: libopenmpt before 0.3.13 allows a crash with malformed MED files.
Key phrases: a crash with malformed MED files, malformed med files
CVE-2018-20861: libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
Key phrases: a crash with certain malformed custom tunings in
CVE-2018-20862: cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366).
CVE-2018-20863: cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452).
Key phrases: execute arbitrary code, execute arbitrary code via mailing-list attachments
CVE-2018-20864: cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454).
Key phrases: a persistent Virtual FTP accounts after removal of, virtual ftp accounts
CVE-2018-20865: cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459).
Key phrases: self xss
CVE-2018-20866: cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461).
Key phrases: stored xss
CVE-2018-20867: cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).
Key phrases: open redirect
CVE-2018-20868: cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464).
Key phrases: stored xss
CVE-2018-20869: cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465).
Key phrases: allows arbitrary code execution, arbitrary code execution in the context of the
CVE-2018-20870: The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467).
CVE-2018-20871: In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
Key phrases: weak file permissions
CVE-2018-20872: DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649.
Key phrases: change DNS or DHCP settings, csrf
CVE-2018-20873: cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).
Key phrases: disable the ClamAV daemon (SEC-409)
CVE-2018-20874: cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).
Key phrases: self XSS in the WHM "Create a, self xss
CVE-2018-20875: cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).
Key phrases: self XSS in the WHM Security Questions interface, self xss
CVE-2018-20876: cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).
Key phrases: self XSS in the Site Software Moderation interface, self xss
CVE-2018-20877: cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).
Key phrases: self XSS in WHM Style Upload interface (, self xss
CVE-2018-20878: cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).
Key phrases: stored XSS in WHM "File and Directory, xss
CVE-2018-20879: cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444).
Key phrases: execute arbitrary code, execute arbitrary code via the Fileman::viewfile API (
CVE-2018-20880: cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445).
CVE-2018-20881: cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).
Key phrases: self stored XSS on the Security Questions login, self stored xss
CVE-2018-20882: cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).
Key phrases: allows arbitrary file, arbitrary file-write operations in the context, arbitrary file write
CVE-2018-20883: cPanel before 74.0.8 allows FTP access during account suspension (SEC-449).
Key phrases: FTP access during account suspension (SEC-449), ftp access
CVE-2018-20884: cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).
Key phrases: stored XSS in the WHM File Restoration interface, xss
CVE-2018-20885: cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).
Key phrases: Apache HTTP Server configuration injection because of DocumentRoot, documentroot variable interpolation
CVE-2018-20886: cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).
CVE-2018-20887: cPanel before 74.0.0 allows SQL injection during database backups (SEC-420).
Key phrases: SQL injection during database backups (SEC-420), sql injection
CVE-2018-20888: cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424).
Key phrases: file modification in the context of the root
CVE-2018-20889: cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425).
Key phrases: certain file-read operations via password file, password file caching, file read
CVE-2018-20890: cPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).
Key phrases: allows arbitrary zone file modifications, arbitrary zone file modifications during record edits (
CVE-2018-20891: cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).
Key phrases: allows arbitrary file, arbitrary file-read operations during File Restoration, arbitrary file read
CVE-2018-20892: cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling (SEC-439).
Key phrases: allows arbitrary zone file modifications, arbitrary zone file modifications because of incorrect CAA
CVE-2018-20893: cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).
Key phrases: file-rename operations during account renames (
CVE-2018-20894: cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories (SEC-443).
CVE-2018-20895: In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).
Key phrases: api tokens
CVE-2018-20896: cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).
Key phrases: code injection in the WHM cPAddons interface (
CVE-2018-20897: cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395).
Key phrases: allows arbitrary file, arbitrary file-unlink operations via the cPAddons
CVE-2018-20898: cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).
Key phrases: e-mail injection during cPAddons moderation (
CVE-2018-20899: cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).
Key phrases: stored XSS in the WHM cPAddons installation interface, xss
CVE-2018-20900: cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).
Key phrases: stored XSS in the YUM autorepair functionality (, xss
CVE-2018-20901: cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).
Key phrases: Remote-Stored XSS in WHM Save Theme, remote-stored xss
CVE-2018-20902: cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408).
Key phrases: read root's crontab file by leveraging ClamAV
CVE-2018-20903: cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).
Key phrases: self XSS in the WHM Backup Configuration interface, self xss
CVE-2018-20904: cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427).
Key phrases: bypass the cron feature restriction, make API calls that bypass the cron feature
CVE-2018-20905: cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).
Key phrases: bypass the backup feature restriction, make API calls that bypass the backup feature
CVE-2018-20906: cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).
Key phrases: bypass the images feature restriction, make API calls that bypass the images feature
CVE-2018-20907: cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).
CVE-2018-20908: cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).
Key phrases: allows arbitrary file, arbitrary file-read operations during pkgacct custom, arbitrary file read
CVE-2018-20909: cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338).
Key phrases: allows arbitrary file, arbitrary file-chmod operations during legacy incremental
CVE-2018-20910: cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).
Key phrases: self XSS in the WHM cPAddons showsecurity Interface, self xss
CVE-2018-20911: cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359).
Key phrases: code execution because "
CVE-2018-20912: cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).
Key phrases: execute code via awstats (SEC-362)
CVE-2018-20913: cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).
Key phrases: read the root accesshash via the WHM /cgi
CVE-2018-20914: In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).
Key phrases: inject arbitrary data
CVE-2018-20915: cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
Key phrases: stored XSS via a WHM Edit DNS Zone, xss
CVE-2018-20916: cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
Key phrases: Stored XSS via a WHM Edit MX Entry, stored xss
CVE-2018-20917: cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
Key phrases: disable Solr (SEC-371)
CVE-2018-20918: cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
Key phrases: stored XSS in WHM DNS Cluster (SEC-372, stored xss
CVE-2018-20919: cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
Key phrases: stored XSS via a WHM Create Account action, stored xss
CVE-2018-20920: cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
Key phrases: stored XSS via a WHM Edit DNS Zone, xss
CVE-2018-20921: cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
Key phrases: stored XSS via a WHM "Delete a, xss
CVE-2018-20922: cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).
Key phrases: stored XSS via a WHM DNS Cleanup action, xss
CVE-2018-20923: cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).
Key phrases: stored XSS via a WHM Synchronize DNS Records, xss
CVE-2018-20924: cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).
Key phrases: allows arbitrary file, arbitrary file-read and file-unlink, arbitrary file read
CVE-2018-20925: cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).
Key phrases: local privilege escalation via the WHM Legacy Language
CVE-2018-20926: cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).
Key phrases: local privilege escalation via the WHM Locale XML
CVE-2018-20927: cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).
Key phrases: jailshell escape because of incorrect crontab parsing (
CVE-2018-20928: cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).
Key phrases: stored XSS via the cpaddons vendor interface (, stored xss
CVE-2018-20929: cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).
Key phrases: an open redirect via the /unprotected/redirect.html
CVE-2018-20930: cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401).
Key phrases: bypass when Htaccess Optimization is enabled (SEC-401, .htaccess restrictions bypass, .htaccess restrictions bypass when Htaccess Optimization is enabled
CVE-2018-20931: cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).
Key phrases: execute code via the Landing Page (SEC-405
CVE-2018-20932: cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).
CVE-2018-20933: cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).
Key phrases: stored xss
CVE-2018-20934: cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).
Key phrases: e-mail account suspensions
CVE-2018-20935: cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).
Key phrases: stored XSS in via a WHM "Reset, xss
CVE-2018-20936: cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf (SEC-308).
Key phrases: read the SRS secret via exim.conf (SEC-308
CVE-2018-20937: cPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321).
CVE-2018-20938: cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).
CVE-2018-20939: cPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging backups (SEC-339).
Key phrases: discover contents of directories (that are not
CVE-2018-20940: cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups (SEC-342).
Key phrases: read root's crontab file during a short
CVE-2018-20941: cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349).
Key phrases: allows arbitrary file, arbitrary file-read operations via restore adminbin, arbitrary file read
CVE-2018-20942: cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring crontab (SEC-351).
Key phrases: read root's crontab file during a short
CVE-2018-20943: cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task (SEC-352).
Key phrases: read root's crontab file during a short
CVE-2018-20944: cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test (SEC-353).
Key phrases: read a copy of httpd.conf that is created
CVE-2018-20945: bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).
Key phrases: insecure file operations (SEC-354)
CVE-2018-20946: cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355).
Key phrases: read zone information because a world-readable, world-readable archive
CVE-2018-20947: cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).
Key phrases: certain file-write operations via the telnetcrt, file write
CVE-2018-20948: cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).
Key phrases: self XSS in cPanel Backup Restoration (SEC-383, self xss
CVE-2018-20949: cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).
Key phrases: self XSS in WHM Apache Configuration Include Editor, self xss
CVE-2018-20950: cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).
Key phrases: self stored XSS in WHM Account Transfer (, self stored xss
CVE-2018-20951: cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).
Key phrases: self XSS in WHM Spamd Startup Config (, self xss
CVE-2018-20952: cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388).
Key phrases: world-readable files
CVE-2018-20953: cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).
Key phrases: self XSS in the WHM listips interface (, self xss
CVE-2018-20954: The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
CVE-2018-20955: Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31.
Key phrases: twipc root password, ftp access
CVE-2018-20956: Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31.
Key phrases: psk
CVE-2018-20957: The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks.
Key phrases: replay attacks
CVE-2018-20958: The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device.
CVE-2018-20959: Jura E8 devices lack Bluetooth connection security.
Key phrases: bluetooth connection security
CVE-2018-20960: Nespresso Prodigio devices lack Bluetooth connection security.
Key phrases: bluetooth connection security
CVE-2018-20961: In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.
Key phrases: cause a denial of service or possibly have, double free, unspecified other impact, unspecified impact
CVE-2018-20962: The Backpack\\\\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
Key phrases: XSS via the select field type, xss
CVE-2018-20963: The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
Key phrases: xss
CVE-2018-20964: The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.
Key phrases: csrf
CVE-2018-20965: The ultimate-member plugin before 2.0.4 for WordPress has XSS.
Key phrases: xss
CVE-2018-20966: The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature.
Key phrases: xss
CVE-2018-20967: The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.
Key phrases: csrf
CVE-2018-20968: The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.
Key phrases: csrf
CVE-2018-20969: do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.
Key phrases: shell metacharacters
CVE-2018-20970: The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues.
Key phrases: xss issues
CVE-2018-20971: The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
Key phrases: csrf
CVE-2018-20972: The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
Key phrases: csrf
CVE-2018-20973: The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.
Key phrases: local file inclusion
CVE-2018-20974: The js-jobs plugin before 1.0.7 for WordPress has CSRF.
Key phrases: csrf
CVE-2018-20975: Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
Key phrases: xss
CVE-2018-20976: An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.
Key phrases: use after free
CVE-2018-20977: The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.
Key phrases: xss
CVE-2018-20978: The wp-all-import plugin before 3.4.7 for WordPress has XSS.
Key phrases: xss
CVE-2018-20979: The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.
Key phrases: privilege escalation
CVE-2018-20980: The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.
Key phrases: parameter tampering
CVE-2018-20981: The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.
Key phrases: submission-data retrieval
CVE-2018-20982: The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.
Key phrases: xss
CVE-2018-20983: The wp-retina-2x plugin before 5.2.3 for WordPress has XSS.
Key phrases: xss
CVE-2018-20984: The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.
Key phrases: object injection
CVE-2018-20985: The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.
Key phrases: local file inclusion
CVE-2018-20986: The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
Key phrases: xss
CVE-2018-20987: The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.
Key phrases: php object injection
CVE-2018-20988: The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.
Key phrases: eval injection
CVE-2018-20989: An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic.
Key phrases: integer underflow
CVE-2018-20990: An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive.
Key phrases: arbitrary file overwrite
CVE-2018-20991: An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.
Key phrases: double free
CVE-2018-20992: An issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled.
Key phrases: uninitialized memory
CVE-2018-20993: An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization.
Key phrases: uncontrolled recursion
CVE-2018-20994: An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled.
Key phrases: infinite recursion
CVE-2018-20995: An issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption because deque updates are mishandled.
Key phrases: memory corruption because deque updates are mishandled, move_head_unchecked
CVE-2018-20996: An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling.
Key phrases: double free, destructor mishandling
CVE-2018-20997: An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
Key phrases: use-after-free, use after free
CVE-2018-20998: An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.
Key phrases: memory corruption
CVE-2018-20999: An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.
Key phrases: incorrect results
CVE-2018-21000: An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption.
Key phrases: heap memory corruption
CVE-2018-21001: The anycomment plugin before 0.0.33 for WordPress has XSS.
Key phrases: xss
CVE-2018-21002: The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
Key phrases: csrf
CVE-2018-21003: The buddyforms plugin before 2.2.8 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2018-21004: The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2018-21005: The bbp-move-topics plugin before 1.1.6 for WordPress has code injection.
Key phrases: code injection
CVE-2018-21006: The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.
Key phrases: csrf
CVE-2018-21007: The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.
Key phrases: direct access
CVE-2018-21008: An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c.
Key phrases: use-after-free, use after free
CVE-2018-21009: Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
Key phrases: integer overflow
CVE-2018-21010: OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
Key phrases: heap buffer overflow
CVE-2018-21011: The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.
Key phrases: unauthorized access
CVE-2018-21012: The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.
Key phrases: xss
CVE-2018-21013: The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.
Key phrases: wp-admin/admin-ajax.php, incorrect access control
CVE-2018-21014: The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS.
Key phrases: xss
CVE-2018-21015: AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication = cfg->AVCLevelIndication;" but cfg could be NULL.
Key phrases: denial of service (NULL pointer dereference and application crash), cause a denial of service (NULL pointer, null pointer dereference
CVE-2018-21016: audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
Key phrases: denial of service (heap-based buffer over-read and application crash), cause a denial of service (heap-, buffer over read
CVE-2018-21017: GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.
Key phrases: memory leak
CVE-2018-21018: Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.
Key phrases: incompletely established sessions
CVE-2018-21019: Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Key phrases: information disclosure
CVE-2018-21020: In very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web before 2.8.27 allows attackers to bypass authentication mechanisms in place.
Key phrases: bypass authentication, bypass authentication mechanisms in place, php type juggling
CVE-2018-21021: img_gantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the host_id parameter.
Key phrases: perform SQL injections via the host_id parameter, sql injections
CVE-2018-21022: makeXML_ListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the host_id parameter.
Key phrases: perform SQL injections via the host_id parameter, sql injections
CVE-2018-21023: getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter.
Key phrases: execute arbitrary code, execute arbitrary code via the ns_id parameter
CVE-2018-21024: licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request.
Key phrases: upload arbitrary files, upload arbitrary files via a POST request
CVE-2018-21025: In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.
Key phrases: become root via a crafted script, incorrect rights
CVE-2018-21026: A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information.
Key phrases: read internal information
CVE-2018-21027: Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled.
Key phrases: trigger an out-of-memory (, out-of-memory (oom) condition
CVE-2018-21028: Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
Key phrases: trigger a memory leak because of missing calls
CVE-2018-21029: systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)
CVE-2018-21030: Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.
Key phrases: xss payload
CVE-2018-21031: Tautulli versions 2.1.38 and below allows remote attackers to bypass intended access control in Plex Media Server because the X-Plex-Token is mishandled and can be retrieved from Tautulli. NOTE: Initially, this id was associated with Plex Media Server 1.18.2.2029-36236cc4c as the affected product and version. Further research indicated that Tautulli is the correct affected product.
Key phrases: bypass intended access control, bypass intended access control in Plex Media Server
CVE-2018-21032: A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.
Key phrases: expose technical information through error messages
CVE-2018-21033: A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager.
Key phrases: load an arbitrary Cascading Style Sheets (CSS
CVE-2018-21034: In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were stored within git.
CVE-2018-21035: In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).
Key phrases: denial of service (memory consumption)
CVE-2018-21036: Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.
Key phrases: cause a denial of service with a single, empty pathname
CVE-2018-21037: Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.
Key phrases: change the administrator password via the panel/, csrf
CVE-2018-21038: An issue was discovered on Samsung mobile devices with N(7.x) software. The Secure Folder app's startup logic allows authentication bypass. The Samsung ID is SVE-2018-11628 (December 2018).
Key phrases: authentication bypass
CVE-2018-21039: An issue was discovered on Samsung mobile devices with N(7.0) software. With the Location permission for the compass feature in Quick Tools (aka QuickTools), an attacker can bypass the lockscreen. The Samsung ID is SVE-2018-12053 (December 2018).
Key phrases: bypass the lockscreen, location permission