Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6784 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-16T16:53:01.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A00824C. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A00824C
CVE ID: CVE-2018-6785 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T03:38:02.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KSysCall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008254. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KSysCall_9A008254
CVE ID: CVE-2018-6786 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T03:37:51.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220840. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KVFG_220840
CVE ID: CVE-2018-6787 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T03:22:55.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x221808. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KVFG_221808
CVE ID: CVE-2018-6788 State: PUBLISHED Published: 2018-02-06T23:00:00Z Last Updated: 2024-09-17T04:25:43.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jiangmin Antivirus 16.0.0.100, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x2208C0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_Antivirus_POC/tree/master/KVFG_2208C0
CVE ID: CVE-2018-6789 State: PUBLISHED Published: 2018-02-08T23:00:00.000Z Last Updated: 2025-10-21T23:45:56.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exim.org/static/doc/security/CVE-2018-6789.txt - http://www.openwall.com/lists/oss-security/2018/02/07/2 - https://usn.ubuntu.com/3565-1/ - http://openwall.com/lists/oss-security/2018/02/10/2 - http://www.securitytracker.com/id/10
ps://usn.ubuntu.com/3565-1/ - http://openwall.com/lists/oss-security/2018/02/10/2 - http://www.securitytracker.com/id/1040461 - https://www.debian.org/security/2018/dsa-4110 - https://www.exploit-db.com/exploits/44571/ - https://lists.debian.org/debian-lts-announce/2018/02/msg00009.html - https://git.exim.org/exim.git/commit/cf3cd306062a08969c41a1cdd32c6855f1abecf1 - https://devco.re/blog/2018/03/06/exim-off-by-one-RCE-exploiting-CVE-2018-6789-en/ - http://www.securityfocus.com/bid/103049 - https://www.exploit-db.com/exploits/45671/ - http://packetstormsecurity.com/files/162959/Exim-base64d-Buffer-Overflow.html
CVE ID: CVE-2018-6790 State: PUBLISHED Published: 2018-02-07T02:00:00 Last Updated: 2024-08-05T06:10:11.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.kde.org/plasma-workspace.git/commit/?id=5bc696b5abcdb460c1017592e80b2d7f6ed3107c - https://cgit.kde.org/plasma-workspace.git/commit/?id=8164beac15ea34ec0d1564f0557fe3e742bdd938 - https://phabricator.k
- https://cgit.kde.org/plasma-workspace.git/commit/?id=8164beac15ea34ec0d1564f0557fe3e742bdd938 - https://phabricator.kde.org/D10188 - https://www.kde.org/announcements/plasma-5.11.5-5.12.0-changelog.php - https://access.redhat.com/errata/RHSA-2019:2141
CVE ID: CVE-2018-6791 State: PUBLISHED Published: 2018-02-07T02:00:00 Last Updated: 2024-08-05T06:10:11.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is "$(touch b)" -- this will create a file called b in the home folder. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.kde.org/plasma-workspa
in the home folder. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.kde.org/plasma-workspace.git/commit/?id=9db872df82c258315c6ebad800af59e81ffb9212 - https://www.debian.org/security/2018/dsa-4116 - https://bugs.kde.org/show_bug.cgi?id=389815
CVE ID: CVE-2018-6792 State: PUBLISHED Published: 2018-02-07T02:00:00 Last Updated: 2024-08-05T06:10:11.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are j_idt118, j_idt120, j_idt122, j_idt124, j_idt126, j_idt128, and j_idt130 under formularioGestionarSecciones:tablaSeccionesMib:*:filter. The GET parameter is nombreAgente. Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Tarlogic-2018-001.txt
CVE ID: CVE-2018-6794 State: PUBLISHED Published: 2018-02-07T05:00:00 Last Updated: 2024-08-05T06:10:11.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is complete, then the data sent by the malicious server will be accepted by web clients such as a web browser or Linux CLI utilities, but ignored by Suricata IDS signatures. This mostly affects IDS signatures for the HTTP protocol and TCP stream content; signatures for TCP packets will inspect such network traffic as usual. Additional Ana
P protocol and TCP stream content; signatures for TCP packets will inspect such network traffic as usual. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OISF/suricata/pull/3202/commits/e1ef57c848bbe4e567d5d4b66d346a742e3f77a1 - https://lists.debian.org/debian-lts-announce/2018/12/msg00000.html - https://redmine.openinfosecfoundation.org/issues/2427 - https://suricata-ids.org/2018/02/14/suricata-4-0-4-available/ - https://www.exploit-db.com/exploits/44247/
CVE ID: CVE-2018-6795 State: PUBLISHED Published: 2018-02-07T21:00:00 Last Updated: 2024-08-05T06:10:11.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/43990/
CVE ID: CVE-2018-6796 State: PUBLISHED Published: 2018-02-07T21:00:00 Last Updated: 2024-08-05T06:10:11.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/43989/
CVE ID: CVE-2018-6797 State: PUBLISHED Published: 2018-04-17T20:00:00 Last Updated: 2024-08-05T06:10:11.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042004 - https://access.redhat.com/errata/RHSA-2018:1192 - http://www.securitytracker.com/id/1040681 - https://usn.ubuntu.com/3625-1/ - https://www.debian.org/security/2018/dsa-4172 - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpujul2
org/security/2018/dsa-4172 - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpujul2020.html - https://rt.perl.org/Public/Bug/Display.html?id=132227
CVE ID: CVE-2018-6798 State: PUBLISHED Published: 2018-04-17T20:00:00 Last Updated: 2024-08-05T06:10:11.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1192 - http://www.securitytracker.com/id/1040681 - https://usn.ubuntu.com/3625-1/ - https://www.debian.org/security/2018/dsa-4172 - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpujul2020.html - http
18/dsa-4172 - https://security.gentoo.org/glsa/201909-01 - https://www.oracle.com/security-alerts/cpujul2020.html - https://rt.perl.org/Public/Bug/Display.html?id=132063
CVE ID: CVE-2018-6799 State: PUBLISHED Published: 2018-02-07T05:00:00 Last Updated: 2024-08-05T06:10:11.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/02/msg00017.html - https://www.debian.org/security/2018/dsa-4321 - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/b41e2efce6d3 - https://lists.deb
.debian.org/security/2018/dsa-4321 - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/b41e2efce6d3 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://www.securityfocus.com/bid/102981 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
CVE ID: CVE-2018-6806 State: PUBLISHED Published: 2018-02-07T05:00:00Z Last Updated: 2024-09-16T20:13:16.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marked 2 through 2.5.11 allows remote attackers to read arbitrary files via a crafted HTML document that triggers a redirect to an x-marked://preview?text= URL. The value of the text parameter can include arbitrary JavaScript code, e.g., making XMLHttpRequest calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.lynxsecurity.io/releases/Local%20File%20Disclosure%20in%20Marked2.pdf - http://support.markedapp.com/discussions/questions/9089-reporting-a-vulnerability
CVE ID: CVE-2018-6808 State: PUBLISHED Published: 2018-03-06T20:00:00 Last Updated: 2024-08-05T06:10:11.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX232161 - http://www.securitytracker.com/id/1040440
CVE ID: CVE-2018-6809 State: PUBLISHED Published: 2018-03-06T20:00:00 Last Updated: 2024-08-05T06:10:11.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX232161 - http://www.securitytracker.com/id/1040440
CVE ID: CVE-2018-6810 State: PUBLISHED Published: 2018-03-06T20:00:00 Last Updated: 2024-08-05T06:10:11.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX232161 - http://www.securitytracker.com/id/1040440
CVE ID: CVE-2018-6811 State: PUBLISHED Published: 2018-03-06T20:00:00 Last Updated: 2024-08-05T06:10:11.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX232161 - http://www.securitytracker.com/id/1040440
CVE ID: CVE-2018-6817 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-6818 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-6819 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-6820 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-6821 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-6822 State: PUBLISHED Published: 2018-02-07T15:00:00 Last Updated: 2024-08-05T06:10:11.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service that can be abused to execute system commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-002.md
CVE ID: CVE-2018-6823 State: PUBLISHED Published: 2018-02-07T16:00:00Z Last Updated: 2024-09-17T01:10:32.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md
CVE ID: CVE-2018-6824 State: PUBLISHED Published: 2018-02-07T17:00:00 Last Updated: 2024-08-05T06:10:11.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"attacker@example.com"' request, which can be followed by a password reset. Additional Analyst Notes: - CVE Program Container: References: - http://www.lynxsecurity.io/releases/XSS%20to%20Account%20Takeover%20in%20Cozy%20Cloud.pdf
CVE ID: CVE-2018-6825 State: PUBLISHED Published: 2018-02-09T15:00:00 Last Updated: 2024-08-05T06:17:15.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on VOBOT CLOCK before 0.99.30 devices. An SSH server exists with a hardcoded vobot account that has root access. Additional Analyst Notes: - CVE Program Container: References: - http://stacksmashing.net/CVE-2018-6825.html
CVE ID: CVE-2018-6826 State: PUBLISHED Published: 2018-02-09T15:00:00 Last Updated: 2024-08-05T06:17:15.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on VOBOT CLOCK before 0.99.30 devices. Cleartext HTTP is used to download a breakout program, and therefore man-in-the-middle attackers can execute arbitrary code by watching for a local user to launch the Breakout Easter Egg feature, and then sending a crafted HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://stacksmashing.net/CVE-2018-6826.html
CVE ID: CVE-2018-6827 State: PUBLISHED Published: 2018-02-09T15:00:00 Last Updated: 2024-08-05T06:17:15.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: VOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information, and consequently execute arbitrary code, via a crafted certificate, as demonstrated by leveraging a hardcoded --no-check-certificate Wget option. Additional Analyst Notes: - CVE Program Container: References: - http://stacksmashing.net/CVE-2018-6827.html
CVE ID: CVE-2018-6829 State: PUBLISHED Published: 2018-02-07T23:00:00 Last Updated: 2024-08-05T06:17:15.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wiki - https://lists.gnupg.or
rogram Container: References: - https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wiki - https://lists.gnupg.org/pipermail/gcrypt-devel/2018-February/004394.html - https://github.com/weikengchen/attack-on-libgcrypt-elgamal - https://www.oracle.com/security-alerts/cpujan2020.html
CVE ID: CVE-2018-6830 State: PUBLISHED Published: 2018-07-09T17:00:00 Last Updated: 2024-08-05T06:17:15.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP
, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote attackers to delete arb
FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote attackers to delete arbitrary files via a .. (dot dot) in the URI path component. Additional Analyst Notes: - CVE Program Container: References: - https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html - https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/
CVE ID: CVE-2018-6831 State: PUBLISHED Published: 2018-07-09T17:00:00 Last Updated: 2024-08-05T06:17:15.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.
5P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote authenticated users to execute
, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote authenticated users to execute arbitrary commands via a ';' in the ntpServer argument. NOTE: this issue exists because of an incomplete fix for CVE-2017-2849. Additional Analyst Notes: - CVE Program Container: References: - https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html - https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/
CVE ID: CVE-2018-6832 State: PUBLISHED Published: 2018-07-09T17:00:00 Last Updated: 2024-08-05T06:17:15.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earli
.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote att