20 matches found
CVE-2026-18888
creationtimestamp| type| source ---|---|--- 2026-08-13 12:45:12+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-2...
CVE-2026-18888 MongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character data
The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...
CVE-2026-18888
CVE-2026-18888 : The MongoDB BI Connector ODBC Driver converts floating point column values into text without verifying that the resulting string fits the destination buffer, which can allow writing past the end of the buffer and corrupt adjacent memory when reading large values. Reported impact ...
CVE-2019-18888
creationtimestamp| type| source ---|---|--- 2024-02-26 10:11:59+00:00| seen| https://t.me/ctinow/193214...
CVE-2020-18888
The CVE-2020-18888 entry concerns puppyCMS v5.1 with an Arbitrary File Deletion vulnerability. According to the documents, a remote attacker can delete files/folders via the vulnerable endpoint /admin/functions.php, due to insufficient path validation/restrictions. The issue is described across m...
CVE-2017-18888
creationtimestamp| type| source ---|---|--- 2020-06-19 22:55:24+00:00| seen| https://t.me/cibsecurity/12919...
CVE-2017-18888
Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 is vulnerable to SQL injection during the fetching of multiple posts. Root cause is likely unsafe SQL handling in post-fetch logic. The vulnerability impacts Mattermost Server (versions listed); no exploit details are provided. Remediation per the ...
Fedora 31 : php-symfony3 (2019-8b0ba02338)
Version 3.4.35 2019-11-13 - bug 34344 Console Constant STDOUT might be undefined nicolas-grekas - security cve-2019-18889 Cache forbid serializing AbstractAdapter and TagAwareAdapter instances nicolas-grekas - security cve-2019-18888 HttpFoundation fix guessing mime-types of files with leading da...
Fedora 30 : php-symfony (2019-9c2ad3b018)
Version 2.8.52 2019-11-13 - security cve-2019-18888 HttpFoundation fix guessing mime-types of files with leading dash nicolas-grekas - security cve-2019-18887 HttpKernel Use constant time comparison in UriSigner stof Note that Tenable Network Security has extracted the preceding description block...
UBUNTU-CVE-2019-18888
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidated user input as the file for which MIME type validation should occur, then arbitrary arguments are passed to the underlying file command...
CVE-2019-18888
Summary: CVE-2019-18888 affects Symfony components (2.8.x, 3.4.x, 4.2.x, 4.3.x) where unvalidated user input could influence the file argument passed to the underlying file command during MIME type validation in HttpFoundation (and Mime in 4.3.x). Impact (as described): If an application passes u...
CVE-2019-18888
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidated user input as the file for which MIME type validation should occur, then arbitrary arguments are passed to the underlying file command...
[SECURITY] [DLA 1999-1] symfony security update
Package : symfony Version : 2.3.21+dfsg-4+deb8u6 CVE ID : CVE-2019-18886 CVE-2019-18887 CVE-2019-18888 Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code execution via unserialization. For Debian ...
[SECURITY] [DSA 4573-1] symfony security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4573-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 18, 2019 https://www.debian.org/security/faq -...
CVE-2019-18888: Prevent argument injection in a MimeTypeGuesser
More info at https://symfony.com/cve-2019-18888...
CVE-2019-18888: Prevent argument injection in a MimeTypeGuesser
Affected versions Symfony 2.8.0 to 2.8.51, 3.4.0 to 3.4.34, 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7 versions of the Symfony HttpFoundation component are affected by this security issue. Symfony 4.3.0 to 4.3.7 versions of the Symfony Mime component are affected by this security issue. The issue has bee...
CVE-2018-18888
An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed...
CVE-2018-18888
The CVE-2018-18888 entry concerns laravelCMS prior to or through 2018-04-02 where the upload mechanism in app/Http/Controllers/Backend/ProfileController.php does not properly validate file extensions and does not rename uploaded files, allowing uploading of arbitrary PHP files. This is reported a...