Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20369 State: PUBLISHED Published: 2018-12-23T02:00:00Z Last Updated: 2024-09-16T22:50:37.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi module. The injection point of the issue is the Add_Update module. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2168
CVE ID: CVE-2018-20370 State: PUBLISHED Published: 2018-12-23T02:00:00Z Last Updated: 2024-09-17T01:16:53.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2171
CVE ID: CVE-2018-20371 State: PUBLISHED Published: 2018-12-23T02:00:00Z Last Updated: 2024-09-16T20:41:47.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by "GET /login.html__passwd1" and "GET /login.html__passwd2" and so on. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2110
CVE ID: CVE-2018-20372 State: PUBLISHED Published: 2018-12-23T02:00:00Z Last Updated: 2024-09-17T02:31:32.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1990 - https://www.youtube.com/watch?v=HUM5myJWbvc
CVE ID: CVE-2018-20373 State: PUBLISHED Published: 2018-12-23T02:00:00Z Last Updated: 2024-09-16T17:08:56.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1990 - https://www.youtube.com/watch?v=HUM5myJWbvc
CVE ID: CVE-2018-20374 State: PUBLISHED Published: 2018-12-23T18:00:00 Last Updated: 2024-08-05T11:58:19.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the use_section1 function in tccasm.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/tinycc-devel/2018-12/msg00015.html
CVE ID: CVE-2018-20375 State: PUBLISHED Published: 2018-12-23T18:00:00 Last Updated: 2024-08-05T11:58:18.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the sym_pop function in tccgen.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/tinycc-devel/2018-12/msg00014.html
CVE ID: CVE-2018-20376 State: PUBLISHED Published: 2018-12-23T18:00:00 Last Updated: 2024-08-05T11:58:19.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asm_parse_directive function in tccasm.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/tinycc-devel/2018-12/msg00013.html
CVE ID: CVE-2018-20377 State: PUBLISHED Published: 2018-12-23T18:00:00 Last Updated: 2024-08-05T11:58:19.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20181223120225/https://badpackets.net/over-19000-orange-livebox-ads
Container: References: - https://web.archive.org/web/20181223120225/https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-wifi-credentials/ - https://news.ycombinator.com/item?id=18745533 - https://github.com/zadewg/LIVEBOX-0DAY - https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-wifi-credentials/
CVE ID: CVE-2018-20378 State: PUBLISHED Published: 2019-03-29T14:20:16 Last Updated: 2024-08-05T11:58:19.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK 3.2 through 6.0 allow remote, unauthenticated attackers to execute arbitrary code or cause a denial of service via malicious L2CAP configuration requests, in conjunction with crafted SDP communication over maliciously configured L2CAP channels. The attacker must have connectivity over the Bluetooth physical layer, and must be able to send raw L2CAP frames. This is related to L2Cap_HandleConfigReq in core/stack/l2cap/l2cap_sm.c and
, and must be able to send raw L2CAP frames. This is related to L2Cap_HandleConfigReq in core/stack/l2cap/l2cap_sm.c and SdpServHandleServiceSearchAttribReq in core/stack/sdp/sdpserv.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.cymotive.com/wp-content/uploads/2019/03/Hell2CAP-0day.pdf - https://www.opensynergy.com/news/security/bluesdk-advisory2018003/
CVE ID: CVE-2018-20379 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T19:57:37.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2018/12/cisco-dpc3928sl-explotando-un-xss-via.html
CVE ID: CVE-2018-20380 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T20:37:35.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20381 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T18:04:26.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20382 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T21:58:02.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20383 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T18:13:05.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20384 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-17T01:17:00.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20385 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T16:52:36.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20386 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T17:23:24.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20387 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T22:14:01.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20388 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-17T02:07:01.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20389 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T17:33:08.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20390 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-17T00:55:37.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20391 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T17:28:52.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20392 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-17T02:06:55.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20393 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T18:12:52.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://g
3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20394 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-17T00:16:47.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20395 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T17:17:44.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20396 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T23:22:13.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20397 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T16:28:34.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: mplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20398 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T23:26:39.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20399 State: PUBLISHED Published: 2018-12-23T21:00:00 Last Updated: 2024-08-05T11:58:19.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html - http://www.securityfocus
v - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html - http://www.securityfocus.com/bid/106320
CVE ID: CVE-2018-20400 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-17T01:41:14.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20401 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-16T16:17:35.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
CVE ID: CVE-2018-20402 State: PUBLISHED Published: 2018-12-23T21:00:00Z Last Updated: 2024-09-17T02:21:25.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the three accounts are the same as the usernames, which are guest, user, and author. Logging in with these accounts will grant any user the default privilege roles that were also created for each of the accounts. Additional Analyst Notes: - CVE Program Container: References: - http://docs.safe.com/fme/html/FME_Server_Documentation/Content/AdminGuide/Default_User_Accounts_and
ainer: References: - http://docs.safe.com/fme/html/FME_Server_Documentation/Content/AdminGuide/Default_User_Accounts_and_Passwords.htm
CVE ID: CVE-2018-20404 State: PUBLISHED Published: 2018-12-26T20:00:00 Last Updated: 2024-08-05T11:58:19.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: ETK_E900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary (uncontrollable) address, resulting in an eternal hang or a BSoD. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-20405 State: PUBLISHED Published: 2018-12-23T23:00:00 Last Updated: 2024-08-05T11:58:19.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error. NOTE: This has been disputed with the following reasoning: "The issue reported requires full developer level access to the content management system where cross site scripting is not an issue -- you already have full control of the CMS including running arbitrary PHP. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/354
CVE ID: CVE-2018-20406 State: PUBLISHED Published: 2018-12-23T23:00:00 Last Updated: 2024-08-05T11:58:19.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data. This issue is fixed in: v3.4.10, v3.4.10rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.7rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.7, v3.6.7rc1, v3.6.7rc2, v3.6.8, v3.6.8rc1, v3
3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.7, v3.6.7rc1, v3.6.7rc2, v3.6.8, v3.6.8rc1, v3.6.9, v3.6.9rc1; v3.7.1, v3.7.1rc1, v3.7.1rc2, v3.7.2, v3.7.2rc1, v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue34656 - https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html - https://github.com/python/cpython/commit/a4ae828ee416a66d8c7bf5ee71d653c2cc6a26dd - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4