Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0633 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.854Z Vendors: NEC Corporation Products: Aterm W300P Problem Types: Buffer Overflow Description: Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via submit-url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN26629618/index.html
CVE ID: CVE-2018-0634 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:48.484Z Vendors: NEC Corporation Products: HC100RC Problem Types: OS Command Injection Description: Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmode parameter of a certain URL. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN84825660/index.html - https://jpn.nec.com/security-info/secinfo/nv18-011.html
CVE ID: CVE-2018-0635 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:48.655Z Vendors: NEC Corporation Products: HC100RC Problem Types: OS Command Injection Description: Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN84825660/index.html - https://jpn.nec.com/security-info/secinfo/nv18-011.html
CVE ID: CVE-2018-0636 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.774Z Vendors: NEC Corporation Products: HC100RC Problem Types: OS Command Injection Description: Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certain URL, different URL from CVE-2018-0634. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN84825660/index.html - https://jpn.nec.com/security-info/secinfo/nv18-011.html
CVE ID: CVE-2018-0637 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.754Z Vendors: NEC Corporation Products: HC100RC Problem Types: OS Command Injection Description: Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via export.cgi encKey parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN84825660/index.html - https://jpn.nec.com/security-info/secinfo/nv18-011.html
CVE ID: CVE-2018-0638 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:48.514Z Vendors: NEC Corporation Products: HC100RC Problem Types: OS Command Injection Description: Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN84825660/index.html - https://jpn.nec.com/security-info/secinfo/nv18-011.html
CVE ID: CVE-2018-0639 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.861Z Vendors: NEC Corporation Products: HC100RC Problem Types: OS Command Injection Description: Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN84825660/index.html - https://jpn.nec.com/security-info/secinfo/nv18-011.html
CVE ID: CVE-2018-0640 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:48.563Z Vendors: NEC Corporation Products: HC100RC Problem Types: Buffer Overflow Description: Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN84825660/index.html - https://jpn.nec.com/security-info/secinfo/nv18-011.html
CVE ID: CVE-2018-0641 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:48.456Z Vendors: NEC Corporation Products: HC100RC Problem Types: Buffer Overflow Description: Buffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date parameter, time parameter, and offset parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN84825660/index.html - https://jpn.nec.com/security-info/secinfo/nv18-011.html
CVE ID: CVE-2018-0642 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.652Z Vendors: Foliovision Products: FV Flowplayer Video Player Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers - http://jvn.jp/en/jp/JVN70246549/index.html
CVE ID: CVE-2018-0643 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.646Z Vendors: ORCA Management Organization Co., Ltd. Products: Ubuntu14.04 ORCA(Online Receipt Computer Advantage)4.8.0(panda-server) 1:1.4.9+p41-u4jma1 and earlier Problem Types: OS Command Injection Description: Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-server) 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN37376131/index.html - https://www.orca.med.or.jp/news/vulnerability_2018-07-18-1.html
CVE ID: CVE-2018-0644 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.802Z Vendors: ORCA Management Organization Co., Ltd. Products: Ubuntu14.04 ORCA(Online Receipt Computer Advantage)4.8.0(panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA(Online Receipt Computer Advantage)5.0.0(panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA(Online Receipt Computer Advantage)5.0.0(panda-client2) 1:2.0.0+p48-u5jma1 and earlier Problem Types: Buffer Overflow Description: Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt Computer Advant
mputer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u5jma1 and earlier allows authenticated attackers to cause denial-of-service (DoS) condition via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN37376131/index.html - https://www.orca.med.or.jp/news/vulnerability_2018-07-18-1.html
CVE ID: CVE-2018-0645 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.639Z Vendors: bit part LLC Products: MTAppjQuery Problem Types: Remote code execution Description: MTAppjQuery 1.8.1 and earlier allows remote PHP code execution via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tinybeans.net/blog/2015/06/26-230919.html - https://bit-part.net/news/2018/07/mtappjquery-20180717.html - http://jvn.jp/en/jp/JVN62423700/index.html
CVE ID: CVE-2018-0646 State: PUBLISHED Published: 2018-09-04T13:00:00 Last Updated: 2024-08-05T03:35:48.759Z Vendors: pon software Products: Explzh Problem Types: Directory traversal Description: Directory traversal vulnerability in Explzh v.7.58 and earlier allows an attacker to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ponsoftware.com/archiver/explzh/explzh.htm#explz759 - http://jvn.jp/en/jp/JVN55813866/index.html
CVE ID: CVE-2018-0647 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.902Z Vendors: ASUS Japan Inc. Products: WL-330NUL Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/us/Networking/WL330NUL/HelpDesk_BIOS/ - http://jvn.jp/en/jp/JVN71329812/index.html
CVE ID: CVE-2018-0648 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.717Z Vendors: ChatWork Co,. LTD. Products: Installer of ChatWork Desktop App for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in installer of ChatWork Desktop App for Windows 2.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN39171169/index.html - https://go.chatwork.com/download/
CVE ID: CVE-2018-0649 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.946Z Vendors: Canon IT Solutions Inc. Products: The installers of multiple Canon IT Solutions Inc. software programs Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones)) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: Refer
privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN41452671/index.html - https://eset-support.canon-its.jp/faq/show/10720?site_domain=default
CVE ID: CVE-2018-0650 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.545Z Vendors: LINE MUSIC CORPORATION Products: LINE MUSIC for Android Problem Types: Fails to verify SSL certificates Description: The LINE MUSIC for Android version 3.1.0 to versions prior to 3.6.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN16933564/index.html - https://play.google.com/store/apps/details?id=jp.linecorp.linemusic.android&hl=en - https://linecorp.com/en/security
l - https://play.google.com/store/apps/details?id=jp.linecorp.linemusic.android&hl=en - https://linecorp.com/en/security/article/182
CVE ID: CVE-2018-0651 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:49.354Z Vendors: Yokogawa Electric Corporation Products: The license management function of YOKOGAWA products Problem Types: Buffer Overflow Description: Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier) allows remote attackers to stop the license management function or execute an arbitrary program via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https
ute an arbitrary program via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/YSAR-18-0006-E.pdf - http://www.securityfocus.com/bid/105124 - https://jvn.jp/vu/JVNVU93845358/
CVE ID: CVE-2018-0652 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.908Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2018/07/31/growi-prevent-xss/ - http://jvn.jp/en/jp/JVN18716340/index.html
CVE ID: CVE-2018-0653 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.690Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2018/07/31/growi-prevent-xss/ - http://jvn.jp/en/jp/JVN18716340/index.html
CVE ID: CVE-2018-0654 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:49.324Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2018/07/31/growi-prevent-xss/ - http://jvn.jp/en/jp/JVN18716340/index.html
CVE ID: CVE-2018-0655 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.842Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2018/07/31/growi-prevent-xss/ - http://jvn.jp/en/jp/JVN18716340/index.html
CVE ID: CVE-2018-0656 State: PUBLISHED Published: 2018-09-04T13:00:00 Last Updated: 2024-08-05T03:35:48.731Z Vendors: Sony Corporation Products: The installer of Digital Paper App Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.sony.com/US/p/swu-download.pl?upd_id=10998&PASSVAL2=SMB. - http://jvn.jp/en/jp/JVN75700242/index.html
CVE ID: CVE-2018-0657 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.682Z Vendors: GMO Payment Gateway, Inc. Products: EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and ear
e) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN06372244/index.html
CVE ID: CVE-2018-0658 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:49.000Z Vendors: GMO Payment Gateway, Inc. Products: EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE Problem Types: Improper Input Validation Description: Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via u
rsion 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN06372244/index.html
CVE ID: CVE-2018-0659 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.948Z Vendors: HiBARA Software Products: AttacheCase Problem Types: Directory traversal Description: Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially crafted ATC file. Additional Analyst Notes: - CVE Program Container: References: - https://hibara.org/software/attachecase/?lang=en - http://jvn.jp/en/jp/JVN62121133/index.html
CVE ID: CVE-2018-0660 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:49.294Z Vendors: HiBARA Software Products: AttacheCase Problem Types: Directory traversal Description: Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create arbitrary files via specially crafted ATC file. Additional Analyst Notes: - CVE Program Container: References: - https://hibara.org/software/attachecase/?lang=en - http://jvn.jp/en/jp/JVN62121133/index.html
CVE ID: CVE-2018-0661 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.922Z Vendors: I-O DATA DEVICE, INC. Products: Multiple I-O DATA network camera products Problem Types: Fails to restrict access Description: Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) allow an attacker on the same network segment to bypass access restriction to add files on a specific directory that may result in executing arbitrary OS commands/code or information including credentials leakage or alteration. Additional Analyst Notes: - CVE Program Container: Refer
ode or information including credentials leakage or alteration. Additional Analyst Notes: - CVE Program Container: References: - http://www.iodata.jp/support/information/2018/ts-wrlp/ - http://jvn.jp/en/jp/JVN83701666/index.html
CVE ID: CVE-2018-0662 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:48.921Z Vendors: I-O DATA DEVICE, INC. Products: Multiple I-O DATA network camera products Problem Types: Insufficient Verification of Data Authenticity Description: Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) allow an attacker on the same network segment to add malicious files on the device and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.iodata.jp/support/information/2018/ts-wrlp/ - http://jvn.jp/en/jp/JVN837016
Program Container: References: - http://www.iodata.jp/support/information/2018/ts-wrlp/ - http://jvn.jp/en/jp/JVN83701666/index.html
CVE ID: CVE-2018-0663 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:35:49.100Z Vendors: I-O DATA DEVICE, INC. Products: Multiple I-O DATA network camera products Problem Types: Use of Hard-coded Credentials Description: Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) use hardcoded credentials which may allow an remote authenticated attacker to execute arbitrary OS commands on the device via unspecified vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.iodata.jp/support/information/2018/ts-wrlp/ - http://jvn.
alyst Notes: - CVE Program Container: References: - http://www.iodata.jp/support/information/2018/ts-wrlp/ - http://jvn.jp/en/jp/JVN83701666/index.html
CVE ID: CVE-2018-0664 State: PUBLISHED Published: 2018-09-04T13:00:00 Last Updated: 2024-08-05T03:35:48.993Z Vendors: NoMachine S.a r.l. Products: NoMachine App for Android Problem Types: External Control of Critical State Data Description: A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.nomachine.com/TR06P08619 - http://jvn.jp/en/jp/JVN14451678/index.html
CVE ID: CVE-2018-0665 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:49.253Z Vendors: Yamaha Corporation, NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Products: Yamaha Broadband VoIP Router RT57i, Yamaha Broadband VoIP Router RT58i, Yamaha Broadband VoIP Router NVR500, Yamaha Gigabit VPN Router RTX810, Yamaha Firewall FWX120, Biz Box Router N58i, N500, NVR500, and RTX810, Biz Box Router N58i, and N500 Problem Types: Script Injection Description: Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative
RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative user to embed arbitrary scripts to the configuration data through a certain form field of the configuration page, which may be executed on another administrative user's web browser. This is a different vulnerability from CVE-2018-0666. Additional Analyst Notes: - CVE Program Container: References: - https://flets-w.com/solution/kiki_info/info/180829.html - https://jvn.jp/en/jp/JVN69967692/index.html - https://web116.jp/ced/support/news/contents/2018/20180829b.html - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN69967692.html
CVE ID: CVE-2018-0666 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:49.105Z Vendors: Yamaha Corporation, NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Products: Yamaha Broadband VoIP Router RT57i, Yamaha Broadband VoIP Router RT58i, Yamaha Broadband VoIP Router NVR500, Yamaha Gigabit VPN Router RTX810, Yamaha Firewall FWX120, Biz Box Router N58i, N500, NVR500, and RTX810, Biz Box Router N58i, and N500 Problem Types: Script Injection Description: Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative
RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative user to embed arbitrary scripts to the configuration data through a certain form field of the configuration page, which may be executed on another administrative user's web browser. This is a different vulnerability from CVE-2018-0665. Additional Analyst Notes: - CVE Program Container: References: - https://flets-w.com/solution/kiki_info/info/180829.html - https://jvn.jp/en/jp/JVN69967692/index.html - https://web116.jp/ced/support/news/contents/2018/20180829b.html - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN69967692.html