Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10506 State: PUBLISHED Published: 2018-06-08T14:00:00 Last Updated: 2024-08-05T07:39:07.685Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Out-of-Bounds Read Information Disclosure Description: A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within the processing of IOCTL 0x220004 by the TMWFP driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - h
target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1119961 - https://www.zerodayinitiative.com/advisories/ZDI-18-566/
CVE ID: CVE-2018-10507 State: PUBLISHED Published: 2018-06-12T17:00:00 Last Updated: 2024-08-05T07:39:08.272Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Insecure Permissions Description: A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-B
es: - http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt - https://success.trendmicro.com/solution/1119961 - https://www.exploit-db.com/exploits/44858/
CVE ID: CVE-2018-10508 State: PUBLISHED Published: 2018-06-12T17:00:00 Last Updated: 2024-08-05T07:39:07.712Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Insecure Permissions Description: A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable installations. An attacker must already have at least guest privileges in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1119961
CVE ID: CVE-2018-10509 State: PUBLISHED Published: 2018-06-12T17:00:00 Last Updated: 2024-08-05T07:39:08.300Z Vendors: Trend Micro Products: Trend Micro OfficeScan Problem Types: Incorrect Access Control Description: A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations. An attacker must be using a AD logon user account in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1119961
CVE ID: CVE-2018-10510 State: PUBLISHED Published: 2018-08-15T19:00:00 Last Updated: 2024-08-05T07:39:07.994Z Vendors: Trend Micro Products: Trend Micro Control Manager Problem Types: Directory Traversal Description: A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to execute arbitrary code on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1120112
CVE ID: CVE-2018-10511 State: PUBLISHED Published: 2018-08-15T19:00:00 Last Updated: 2024-08-05T07:39:07.679Z Vendors: Trend Micro Products: Trend Micro Control Manager Problem Types: SSRF Description: A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side request forgery (SSRF) attack on vulnerable installations. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1120112
CVE ID: CVE-2018-10512 State: PUBLISHED Published: 2018-08-15T19:00:00 Last Updated: 2024-08-05T07:39:08.247Z Vendors: Trend Micro Products: Trend Micro Control Manager Problem Types: Insecure Permissions Description: A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations, which may lead to a denial of server (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/1120112
CVE ID: CVE-2018-10513 State: PUBLISHED Published: 2018-08-30T19:00:00 Last Updated: 2024-08-05T07:39:07.734Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Privilege Escalation Description: A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120742.aspx
: - CVE Program Container: References: - https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120742.aspx - https://www.zerodayinitiative.com/advisories/ZDI-18-961/
CVE ID: CVE-2018-10514 State: PUBLISHED Published: 2018-08-30T19:00:00 Last Updated: 2024-08-05T07:39:08.290Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Privilege Escalation Description: A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-962/ - https://esupport.trendmicro.com/
ram Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-18-962/ - https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120742.aspx
CVE ID: CVE-2018-10515 State: PUBLISHED Published: 2018-04-27T18:00:00Z Last Updated: 2024-09-16T19:21:00.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) through 2.2.7, the "file unpack" operation in the admin dashboard contains a remote code execution vulnerability exploitable by an admin user because a .php file can be present in the extracted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md
CVE ID: CVE-2018-10516 State: PUBLISHED Published: 2018-04-27T18:00:00Z Last Updated: 2024-09-17T01:15:37.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) through 2.2.7, the "file rename" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by an admin user, that can cause DoS by moving config.php to the upload/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md
CVE ID: CVE-2018-10517 State: PUBLISHED Published: 2018-04-27T18:00:00 Last Updated: 2024-08-05T07:39:08.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code execution vulnerability, exploitable by an admin user, because an XML Package can contain base64-encoded PHP code in a data element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md - https://www.exploit-db.com/exploits/45793/
CVE ID: CVE-2018-10518 State: PUBLISHED Published: 2018-04-27T18:00:00Z Last Updated: 2024-09-16T20:36:54.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) through 2.2.7, the "file delete" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md
CVE ID: CVE-2018-10519 State: PUBLISHED Published: 2018-04-27T18:00:00Z Last Updated: 2024-09-16T20:47:50.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this->_loginkey] to equal 1, because files in the tmp/ directory are accessible through HTTP requests. NOTE: this vulnerability exists because of an incorrect fix for CVE-2018-10084. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md
CVE ID: CVE-2018-10520 State: PUBLISHED Published: 2018-04-27T18:00:00Z Last Updated: 2024-09-16T17:32:48.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md
CVE ID: CVE-2018-10521 State: PUBLISHED Published: 2018-04-27T18:00:00Z Last Updated: 2024-09-16T23:31:17.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md
CVE ID: CVE-2018-10522 State: PUBLISHED Published: 2018-04-27T18:00:00Z Last Updated: 2024-09-17T01:35:50.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple (CMSMS) through 2.2.7, the "file view" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by ordinary users, because the product exposes unrestricted access to the PHP file_get_contents function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md
CVE ID: CVE-2018-10523 State: PUBLISHED Published: 2018-04-27T18:00:00Z Last Updated: 2024-09-16T23:01:14.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajax_get_templates.php, /modules/DesignManager/action.ajax_get_stylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cmsms_cve/blob/master/README.md
CVE ID: CVE-2018-10527 State: PUBLISHED Published: 2018-04-28T16:00:00 Last Updated: 2024-08-05T07:39:08.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.html#listarticle URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/teameasy/EasyCMS/issues/2
CVE ID: CVE-2018-10528 State: PUBLISHED Published: 2018-04-29T03:00:00 Last Updated: 2024-08-05T07:39:08.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/issues/144 - https://usn.ubuntu.com/3639-1/ - https://github.com/LibRaw/LibRaw/commit/efd8cfabb93fd0396266a7607069901657c082e3
CVE ID: CVE-2018-10529 State: PUBLISHED Published: 2018-04-29T03:00:00 Last Updated: 2024-08-05T07:39:08.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/issues/144 - https://github.com/LibRaw/LibRaw/commit/f0c505a3e5d47989a5f69be2d0d4f250af6b1a6c - https://usn.ubuntu.com/3639-1/
CVE ID: CVE-2018-10531 State: PUBLISHED Published: 2019-07-10T15:32:21 Last Updated: 2024-08-05T07:39:07.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.xlabs.com.br/blog/author/mauricio-correa/ - https://www.xlabs.com.br/blog/cve-2018-10531-americas-army-proving-grounds-ddos-amplification/
CVE ID: CVE-2018-10532 State: PUBLISHED Published: 2018-10-30T18:00:00 Last Updated: 2024-08-05T07:39:08.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices. Hardcoded root SSH credentials were discovered to be stored within the "core_app" binary utilised by the EE router for networking services. An attacker with knowledge of the default password (oelinux123) could login to the router via SSH as the root user, which could allow for the loss of confidentiality, integrity, and availability of the system. This would also allow for the bypass of the "AP Isolation" mode that is supported by the router, as well
of the system. This would also allow for the bypass of the "AP Isolation" mode that is supported by the router, as well as the settings for multiple Wireless networks, which a user may use for guest clients. Additional Analyst Notes: - CVE Program Container: References: - https://www.theregister.co.uk/2018/10/26/ee_4gee_hh70_ssh_backdoor/ - https://blog.jameshemmings.co.uk/2018/10/24/4gee-hh70-router-vulnerability-disclosure/
CVE ID: CVE-2018-10534 State: PUBLISHED Published: 2018-04-29T15:00:00 Last Updated: 2024-08-05T07:39:07.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (external_IMAGE_DEBUG_DIRECTORY) *edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c. Additional Analyst Notes: - CV
opy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104025 - https://access.redhat.com/errata/RHSA-2018:3032 - https://sourceware.org/bugzilla/show_bug.cgi?id=23110 - https://access.redhat.com/errata/RHBA-2019:0327 - https://security.gentoo.org/glsa/201908-01 - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-10535 State: PUBLISHED Published: 2018-04-29T15:00:00 Last Updated: 2024-08-05T07:39:08.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3032 - https
Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3032 - https://sourceware.org/bugzilla/show_bug.cgi?id=23113 - http://www.securityfocus.com/bid/104021 - https://access.redhat.com/errata/RHBA-2019:0327 - https://security.gentoo.org/glsa/201908-01 - https://usn.ubuntu.com/4336-1/
CVE ID: CVE-2018-10536 State: PUBLISHED Published: 2018-04-29T15:00:00 Last Updated: 2024-08-05T07:39:08.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a vulnerability that allows writing to memory because ParseRiffHeaderConfig in riff.c does not reject multiple format chunks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dbry/WavPack/issues/32 - https://www.debian.org/security/2018/dsa-4197 - https://github.com/dbry/WavPack/issues/31 - https://usn.ubuntu.com/3637-1/ - https://github.com/dbry/WavPack/issues/30 - https://github.com/dbry/WavPack/commit/
1 - https://usn.ubuntu.com/3637-1/ - https://github.com/dbry/WavPack/issues/30 - https://github.com/dbry/WavPack/commit/26cb47f99d481ad9b93eeff80d26e6b63bbd7e15 - https://seclists.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
CVE ID: CVE-2018-10537 State: PUBLISHED Published: 2018-04-29T15:00:00 Last Updated: 2024-08-05T07:39:08.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dbry/WavPack/issues/32 - https://www.debian.org/security/2018/dsa-4197 - https://github.com/dbry/WavPack/issues/31 - https://usn.ubuntu.com/3637-1/ - https://github.com/dbry/WavPack/issues/30 - https://github.com/dbry/WavPack/com
es/31 - https://usn.ubuntu.com/3637-1/ - https://github.com/dbry/WavPack/issues/30 - https://github.com/dbry/WavPack/commit/26cb47f99d481ad9b93eeff80d26e6b63bbd7e15 - https://seclists.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
CVE ID: CVE-2018-10538 State: PUBLISHED Published: 2018-04-29T15:00:00 Last Updated: 2024-08-05T07:39:08.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHeaderConfig in riff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dbry/WavPack/issues/33 - https://www.debian.org/security/2018/dsa-4197
ogram Container: References: - https://github.com/dbry/WavPack/issues/33 - https://www.debian.org/security/2018/dsa-4197 - https://usn.ubuntu.com/3637-1/ - https://github.com/dbry/WavPack/commit/6f8bb34c2993a48ab9afbe353e6d0cff7c8d821d - https://seclists.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
CVE ID: CVE-2018-10539 State: PUBLISHED Published: 2018-04-29T15:00:00 Last Updated: 2024-08-05T07:39:07.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdiffHeaderConfig in dsdiff.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dbry/WavPack/issues/33 - https://www.debian.org/security/2018/d
CVE Program Container: References: - https://github.com/dbry/WavPack/issues/33 - https://www.debian.org/security/2018/dsa-4197 - https://usn.ubuntu.com/3637-1/ - https://github.com/dbry/WavPack/commit/6f8bb34c2993a48ab9afbe353e6d0cff7c8d821d - https://seclists.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
CVE ID: CVE-2018-10540 State: PUBLISHED Published: 2018-04-29T15:00:00 Last Updated: 2024-08-05T07:39:07.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WavPack 5.1.0 and earlier for W64 input. Out-of-bounds writes can occur because ParseWave64HeaderConfig in wave64.c does not validate the sizes of unknown chunks before attempting memory allocation, related to a lack of integer-overflow protection within a bytes_to_copy calculation and subsequent malloc call, leading to insufficient memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dbry/WavPack/issues/33 - https://www.debian.org/security/2018/dsa-
E Program Container: References: - https://github.com/dbry/WavPack/issues/33 - https://www.debian.org/security/2018/dsa-4197 - https://usn.ubuntu.com/3637-1/ - https://github.com/dbry/WavPack/commit/6f8bb34c2993a48ab9afbe353e6d0cff7c8d821d - https://seclists.org/bugtraq/2019/Dec/37 - http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFFFWIWALGQPKINRDW3PRGRD5LOLGZA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRWQNE3TH5UF64IKHKKHVCHJHUOVKJUH/
CVE ID: CVE-2018-10544 State: PUBLISHED Published: 2018-05-02T07:00:00 Last Updated: 2024-08-05T07:39:08.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface. Additional Analyst Notes: - CVE Program Container: References: - https://garrettmiller.github.io/meross-mss110-vuln/