Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lidation of user privileges when using the web management interface. An attacker could exploit this vulnerability by sending specific HTTP requests via HTTPS to an affected device as an unprivileged user. An exploit could allow the attacker to retrieve files (including the running configuration) from the device or to upload and replace software images on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106256 - https://www.tenable.com/security/research/tra-2018-46 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181219-asa-privesc
CVE ID: CVE-2018-15466 State: PUBLISHED Published: 2019-01-11T15:00:00Z Last Updated: 2024-11-19T19:17:55.725Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Cisco Products: Cisco Policy Suite (CPS) Software Problem Types: CWE-284 Description: A vulnerability in the Graphite web interface of the Policy and Charging Rules Function (PCRF) of Cisco Policy Suite (CPS) could allow an unauthenticated, remote attacker to access the Graphite web interface. The attacker would need to have access to the internal VLAN where CPS is deployed. The vulnerability is due to lack of authentication. An attacker could exploit this vulnerability by directly connecting to the Gr
rability is due to lack of authentication. An attacker could exploit this vulnerability by directly connecting to the Graphite web interface. An exploit could allow the attacker to access various statistics and Key Performance Indicators (KPIs) regarding the Cisco Policy Suite environment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-cps-graphite-access - http://www.securityfocus.com/bid/106517
CVE ID: CVE-2018-15467 State: PUBLISHED Published: 2019-01-11T15:00:00Z Last Updated: 2024-11-21T19:48:47.670Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Cisco Products: Cisco TelePresence Management Suite (TMS) Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attac
to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106508 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-tms-xss
CVE ID: CVE-2018-15468 State: PUBLISHED Published: 2018-08-17T17:00:00 Last Updated: 2024-08-05T09:54:03.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x. The DEBUGCTL MSR contains several debugging features, some of which virtualise cleanly, but some do not. In particular, Branch Trace Store is not virtualised by the processor, and software has to be careful to configure it suitably not to lock up the core. As a result, it must only be available to fully trusted guests. Unfortunately, in the case that vPMU is disabled, all value checking was skipped, allowing the guest to choose any MSR_DEBUGCTL setting it likes. A malicious or bu
abled, all value checking was skipped, allowing the guest to choose any MSR_DEBUGCTL setting it likes. A malicious or buggy guest administrator (on Intel x86 HVM or PVH) can lock up the entire host, causing a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-269.html - https://security.gentoo.org/glsa/201810-06
CVE ID: CVE-2018-15469 State: PUBLISHED Published: 2018-08-17T17:00:00 Last Updated: 2024-08-05T09:54:03.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-06 - https:/
). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html - http://xenbits.xen.org/xsa/advisory-268.html
CVE ID: CVE-2018-15470 State: PUBLISHED Published: 2018-08-17T17:00:00 Last Updated: 2024-08-05T09:54:03.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x. The logic in oxenstored for handling writes depended on the order of evaluation of expressions making up a tuple. As indicated in section 7.7.3 "Operations on data structures" of the OCaml manual, the order of evaluation of subexpressions is not specified. In practice, different implementations behave differently. Thus, oxenstored may not enforce the configured quota-maxentity. This allows a malicious or buggy guest to write as many xenstore entries as it wishes, causing unbounde
quota-maxentity. This allows a malicious or buggy guest to write as many xenstore entries as it wishes, causing unbounded memory usage in oxenstored. This can lead to a system-wide DoS. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html - http://xenbits.xen.org/xsa/advisory-272.html
CVE ID: CVE-2018-15471 State: PUBLISHED Published: 2018-08-17T17:00:00 Last Updated: 2024-08-05T09:54:03.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1, as used in Xen through 4.11.x and other products. The Linux netback driver allows frontends to control mapping of requests to request queues. When processing a request to set or change this mapping, some input validation (e.g., for an integer overflow) was missing or flawed, leading to OOB access in hash handling. A malicious or buggy frontend may cause the (usually privileged) backend to make out of bounds
access in hash handling. A malicious or buggy frontend may cause the (usually privileged) backend to make out of bounds memory accesses, potentially resulting in one or more of privilege escalation, Denial of Service (DoS), or information leaks. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3820-1/ - http://xenbits.xen.org/xsa/advisory-270.html - https://usn.ubuntu.com/3820-2/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=1607 - https://www.debian.org/security/2018/dsa-4313 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://usn.ubuntu.com/3819-1/ - https://usn.ubuntu.com/3820-3/
CVE ID: CVE-2018-15472 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-10T15:09:21.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
CVE ID: CVE-2018-15473 State: PUBLISHED Published: 2018-08-17T00:00:00 Last Updated: 2024-08-05T09:54:03.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-03 - http://www.securitytracker.com/id/1041487 - https://www.exploit-db.com/exploits/45233/ - https://bugs.debian.org/906236 - https://www.exploit-db.com/exploits/452
- https://www.exploit-db.com/exploits/45233/ - https://bugs.debian.org/906236 - https://www.exploit-db.com/exploits/45210/ - https://security.netapp.com/advisory/ntap-20181101-0001/ - https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0 - https://usn.ubuntu.com/3809-1/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html - http://www.securityfocus.com/bid/105140 - https://www.debian.org/security/2018/dsa-4280 - https://www.exploit-db.com/exploits/45939/ - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011 - http://www.openwall.com/lists/oss-security/2018/08/15/5 - https://access.redhat.com/errata/RHSA-2019:0711 - https://access.redhat.c
openwall.com/lists/oss-security/2018/08/15/5 - https://access.redhat.com/errata/RHSA-2019:0711 - https://access.redhat.com/errata/RHSA-2019:2143 - https://www.oracle.com/security-alerts/cpujan2020.html - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2018-15474 State: PUBLISHED Published: 2018-09-07T22:00:00 Last Updated: 2024-08-05T09:54:03.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV Injection (aka Excel Macro Injection or Formula Injection) in /lib/plugins/usermanager/admin.php in DokuWiki 2018-04-22a and earlier allows remote attackers to exfiltrate sensitive data and to execute arbitrary code via a value that is mishandled in a CSV export. NOTE: the vendor has stated "this is not a security problem in DokuWiki. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/splitbrain/dokuwiki/issues/2450 - https://www.sec-consult.com/en/blog/advisories/dokuwiki-csv-formula-inje
://github.com/splitbrain/dokuwiki/issues/2450 - https://www.sec-consult.com/en/blog/advisories/dokuwiki-csv-formula-injection-vulnerability/ - https://seclists.org/fulldisclosure/2018/Sep/4 - https://www.patreon.com/posts/unfixed-security-21250652
CVE ID: CVE-2018-15476 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:54:03.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The SSL/TLS server certificate in the device to cloud communication was not verified by the device. As a result, an attacker in control of the network traffic of a device could have taken control of a device by intercepting and modifying commands issued from the server to the device in a Man-in-the-Mi
taken control of a device by intercepting and modifying commands issued from the server to the device in a Man-in-the-Middle attack. This included the ability to inject firmware update commands into the communication and cause the device to install maliciously modified firmware. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-15476ff.txt
CVE ID: CVE-2018-15477 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:54:03.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious servers were able to run operating system commands on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-15476ff.txt
CVE ID: CVE-2018-15478 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:54:03.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The process of registering a device with a cloud account was based on an activation code derived from the device MAC address. By guessing valid MAC addresses or using MAC addresses printed on devices in shops and reverse engineering the protocol, an attacker would have been able to register previously
rinted on devices in shops and reverse engineering the protocol, an attacker would have been able to register previously unregistered devices to their account. When the rightful owner would have connected them after purchase to their WiFi network, the devices would not have registered with their account, would subsequently not have been controllable from the owner's mobile app, and would not have been visible in the owner's account. Instead, they would have been under control of the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-15476ff.txt
CVE ID: CVE-2018-15479 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:54:03.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. Devices did not authenticate themselves to the cloud in device to cloud communication. This lack of device authentication allowed an attacker to impersonate any device by guessing or learning their MAC address. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/co
learning their MAC address. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-15476ff.txt
CVE ID: CVE-2018-15480 State: PUBLISHED Published: 2018-08-30T17:00:00 Last Updated: 2024-08-05T09:54:03.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The cloud API had a hidden parameter, which allowed an authenticated user to reconfigure the server URL for a device registered to their account. In combination with an insecure device registration vulnerability, this allowed an attacker to reconfigure a maliciously registered device to their own rogu
ce registration vulnerability, this allowed an attacker to reconfigure a maliciously registered device to their own rogue replica of the myStrom API and issue commands to the device, including firmware update commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-15476ff.txt
CVE ID: CVE-2018-15481 State: PUBLISHED Published: 2018-08-21T16:00:00 Last Updated: 2024-08-05T09:54:03.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x before 5.1.13 allows authenticated remote attackers to escape the shell and escalate their privileges by adding a LocalCommand to the SSH configuration file in the user home folder. Additional Analyst Notes: - CVE Program Container: References: - https://securite.intrinsec.com/2018/08/20/cve-2018-15481-ucopia-wireless-appliance-restricted-shell-escape-5-1-13/
CVE ID: CVE-2018-15482 State: PUBLISHED Published: 2018-08-17T20:00:00 Last Updated: 2024-08-05T09:54:03.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT application intents. The LG ID is LVE-SMP-180006. Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/security_updates.html - https://www.kryptowire.com/portal/android-firmware-defcon-2018/
CVE ID: CVE-2018-15483 State: PUBLISHED Published: 2018-09-07T22:00:00 Last Updated: 2024-08-05T09:54:03.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04. Additional Analyst Notes: - CVE Program Container: References: - https://www.kone.com/en/vulnerability.aspx - http://packetstormsecurity.com/files/149252/KONE-KGC-4.6.4-DoS-Code-Execution-LFI-Bypass.html
CVE ID: CVE-2018-15484 State: PUBLISHED Published: 2018-09-07T22:00:00 Last Updated: 2024-08-05T09:54:03.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01. Additional Analyst Notes: - CVE Program Container: References: - https://www.kone.com/en/vulnerability.aspx - http://packetstormsecurity.com/files/149252/KONE-KGC-4.6.4-DoS-Code-Execution-LFI-Bypass.html
CVE ID: CVE-2018-15485 State: PUBLISHED Published: 2018-09-07T22:00:00 Last Updated: 2024-08-05T09:54:03.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03. Additional Analyst Notes: - CVE Program Container: References: - https://www.kone.com/en/vulnerability.aspx - http://packetstormsecurity.com/files/149252/KONE-KGC-4.6.4-DoS-Code-Execution-LFI-Bypass.html
CVE ID: CVE-2018-15486 State: PUBLISHED Published: 2018-09-07T22:00:00 Last Updated: 2024-08-05T09:54:03.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02. Additional Analyst Notes: - CVE Program Container: References: - https://www.kone.com/en/vulnerability.aspx - http://packetstormsecurity.com/files/149252/KONE-KGC-4.6.4-DoS-Code-Execution-LFI-Bypass.html
CVE ID: CVE-2018-15490 State: PUBLISHED Published: 2019-01-02T18:00:00 Last Updated: 2024-08-05T09:54:03.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ExpressVPN on Windows. The Xvpnd.exe process (which runs as a service with SYSTEM privileges) listens on TCP port 2015, which is used as an RPC interface for communication with the client side of the ExpressVPN application. A JSON-RPC protocol over HTTP is used for communication. The JSON-RPC XVPN.GetPreference and XVPN.SetPreference methods are vulnerable to path traversal, and allow reading and writing files on the file system on behalf of the service. Additional Analyst Notes: - CVE Program Conta
low reading and writing files on the file system on behalf of the service. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Wflki/https-medium-com-wflki-cve-2018-15490-expressvpn-local-privilege-escalation-d22c86fecc47
CVE ID: CVE-2018-15491 State: PUBLISHED Published: 2018-08-18T02:00:00 Last Updated: 2024-08-05T09:54:03.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the permission and encryption implementation of Zemana Anti-Logger 1.9.3.527 and prior (fixed in 1.9.3.602) allows an attacker to take control of the whitelisting feature (MyRules2.ini under %LOCALAPPDATA%\Zemana\ZALSDK) to permit execution of unauthorized applications (such as ones that record keystrokes). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mspaling/zemana-exclusions-poc/blob/master/zemana-whitelist-poc.txt
CVE ID: CVE-2018-15492 State: PUBLISHED Published: 2018-08-18T02:00:00 Last Updated: 2024-08-05T09:54:03.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification. Additional Analyst Notes: - CVE Program Container: References: - https://support.radware.com/app/answers/answer_view/a_id/17879/~/security-advisory-sentinel-reflection-ddos - https://github.com/mspaling/sentinel-ddos-signature/blob/master/sentinel-ddos-signature.txt
CVE ID: CVE-2018-15493 State: PUBLISHED Published: 2018-10-17T14:00:00 Last Updated: 2024-08-05T09:54:03.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: vBulletin 5.4.3 has an Open Redirect. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-017.txt
CVE ID: CVE-2018-15494 State: PUBLISHED Published: 2018-08-18T02:00:00 Last Updated: 2024-08-05T09:54:03.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid. Additional Analyst Notes: - CVE Program Container: References: - https://dojotoolkit.org/blog/dojo-1-14-released - https://lists.debian.org/debian-lts-announce/2018/09/msg00002.html - https://github.com/dojo/dojox/pull/283
CVE ID: CVE-2018-15495 State: PUBLISHED Published: 2018-08-18T02:00:00 Last Updated: 2024-08-05T09:54:03.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: /filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, as demonstrated by a file:///etc/passwd value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trippo/ResponsiveFilemanager/blob/master/changelog.txt - http://seclists.org/fulldisclosure/2018/Aug/9
CVE ID: CVE-2018-15497 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T09:54:03.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/uk/our-research/technical-advisory-mitel-mivoice-5330e-memory-corruption-flaw/ - https://www.mitel.com/en-ca/support/security-
-research/technical-advisory-mitel-mivoice-5330e-memory-corruption-flaw/ - https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0009
CVE ID: CVE-2018-15498 State: PUBLISHED Published: 2019-03-19T22:30:17 Last Updated: 2024-08-05T09:54:03.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: YSoft SafeQ Server 6 allows a replay attack. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/wp-content/uploads/sites/4/usd20180021.txt