admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-07-29 05:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

- Synchronized data.

Browse Source
This commit is contained in:
CVE Team 2018-10-08 09:06:12 -04:00
parent dfc060e2b9
commit 9635686fae
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
4 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2018/11xxx/CVE-2018-11797.json
View File

@ -60,6 +60,11 @@
"name" : "[announce] 20181005 [CVE-2018-11797] DoS vulnerability in Apache PDFBox parser",
"refsource" : "MLIST",
"url" : "https://lists.apache.org/thread.html/a9760973a873522f4d4c0a99916ceb74f361d91006b663a0a418d34a@%3Cannounce.apache.org%3E"
},
{
"name" : "[announce] 20181006 [UPDATE][CVE-2018-11797] DoS vulnerability in Apache PDFBox parser",
"refsource" : "MLIST",
"url" : "https://lists.apache.org/thread.html/645574bc50b886d39c20b4065d51ccb1cd5d3a6b4750a22edbb565eb@%3Cannounce.apache.org%3E"
}
]
}

4
2018/14xxx/CVE-2018-14810.json
View File

@ -45,7 +45,7 @@
"description_data" : [
{
"lang" : "eng",
"value" : "WECON Technology Co., Ltd. PI Studio has an affected product that parses files and passes invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator."
"value" : "WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator."
}
]
},
@ -64,6 +64,8 @@
"references" : {
"reference_data" : [
{
"name" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01",
"refsource" : "MISC",
"url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01"
}
]

4
2018/14xxx/CVE-2018-14818.json
View File

@ -45,7 +45,7 @@
"description_data" : [
{
"lang" : "eng",
"value" : "WECON Technology Co., Ltd. PI Studio has a stack-based buffer overflow vulnerability which may allow remote code execution."
"value" : "WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote code execution."
}
]
},
@ -64,6 +64,8 @@
"references" : {
"reference_data" : [
{
"name" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01",
"refsource" : "MISC",
"url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01"
}
]

4
2018/17xxx/CVE-2018-17889.json
View File

@ -45,7 +45,7 @@
"description_data" : [
{
"lang" : "eng",
"value" : "WECON Technology Co., Ltd. PI Studio when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure."
"value" : "In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure."
}
]
},
@ -64,6 +64,8 @@
"references" : {
"reference_data" : [
{
"name" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01",
"refsource" : "MISC",
"url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01"
}
]