Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7314 State: PUBLISHED Published: 2018-02-22T19:00:00 Last Updated: 2024-08-05T06:24:11.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44160
CVE ID: CVE-2018-7315 State: PUBLISHED Published: 2018-02-22T19:00:00 Last Updated: 2024-08-05T06:24:11.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1, age2, religion, mothertounge, caste, or country parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44161
CVE ID: CVE-2018-7316 State: PUBLISHED Published: 2018-02-22T19:00:00 Last Updated: 2024-08-05T06:24:11.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Upload exists in the Proclaim 9.1.1 component for Joomla! via a mediafileform action. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44164
CVE ID: CVE-2018-7317 State: PUBLISHED Published: 2018-02-22T19:00:00 Last Updated: 2024-08-05T06:24:11.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44159
CVE ID: CVE-2018-7318 State: PUBLISHED Published: 2018-02-22T19:00:00 Last Updated: 2024-08-05T06:24:11.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filter_order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44163 - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2018-7319 State: PUBLISHED Published: 2018-02-22T19:00:00 Last Updated: 2024-08-05T06:24:12.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system1, or laundry parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44165
CVE ID: CVE-2018-7320 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:12.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14398 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=015e3399390b8b5cfbfcfcda30589983ab6cc129 - https://www.debian.org/security/2018/dsa-4217 - http://www.securityfocus.com/bid/103160 - https://www.wireshark.o
c129 - https://www.debian.org/security/2018/dsa-4217 - http://www.securityfocus.com/bid/103160 - https://www.wireshark.org/security/wnpa-sec-2018-10.html
CVE ID: CVE-2018-7321 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:12.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c784d551ad50864de1035ce54e72837301cf6aca - https://www.wireshark.org/security/wnpa-sec-2018-06.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14379 - http://www.securityfocus.com/bid/103158
CVE ID: CVE-2018-7322 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed by checking for integer wraparound. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html - https://www.wireshark.org/security/wnpa-sec-2018-06.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14411 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=afc780e2c796e971bb7d164103f4f0d10d3c25b5 - http://www
://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=afc780e2c796e971bb7d164103f4f0d10d3c25b5 - http://www.securityfocus.com/bid/103158 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html
CVE ID: CVE-2018-7323 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5d45b69b590cabc5127282d1ade3bca1598e5f5c -
58 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5d45b69b590cabc5127282d1ade3bca1598e5f5c - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f9199ea8cff56c6704e9828c3d80360b27c4565 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14412
CVE ID: CVE-2018-7324 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed by using a correct integer data type. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh
.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9e7695bbee18525eaa6d12b32230313ae8a36a81 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14413
CVE ID: CVE-2018-7325 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was addressed by validating a length field. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14414 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7be234d06ea3
rg/bugzilla/show_bug.cgi?id=14414 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7be234d06ea39ab6a88115ae41d71060f1f15e3c
CVE ID: CVE-2018-7326 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed by using a correct integer data type. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14419 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=293b999425e998d6cde0d9149648e421ea7687d0
CVE ID: CVE-2018-7327 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by validating property lengths. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14420 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=563989f888e51258edb9a27db56124bdc33c9afe
CVE ID: CVE-2018-7328 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14421 - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=69d09028c956f6e049145485ce9b3e2858789b2b
CVE ID: CVE-2018-7329 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting off-by-one errors. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d8a0cbc4f2979e0b1cadbe79f0b8b4ecb92477be - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14423
CVE ID: CVE-2018-7330 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct integer data type. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14428 - https://www.wireshark.org/security/wnpa-sec-2018-06.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8ad0c5b3683a17d9e2e16bbf25869140fd5c1c66 - http://www.securityfocus.com/bid/103158
CVE ID: CVE-2018-7331 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=157712b2f5f89b19ef2497ea89c5938eb29529da - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://bugs.wireshark.org/bugzilla/show
d/103158 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14444
CVE ID: CVE-2018-7332 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a length. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14445 - https://www.wireshark.org/security/wnpa-sec-2018-06.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1ab0585098c7ce20f3afceb6730427cc2a1e98ea - http://www.security
ireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1ab0585098c7ce20f3afceb6730427cc2a1e98ea - http://www.securityfocus.com/bid/103158
CVE ID: CVE-2018-7333 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bd6313181317bfe83842b27650b65f3c2b8d5dc9 - https://www.wireshark.org/security/wnpa-sec-2018-06.html - http://www.securityfocus.com/bid/103158 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14449
CVE ID: CVE-2018-7334 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissectors/packet-umts_mac.c by rejecting a certain reserved value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103162 - https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html - https://www.debian.org/security/2018/dsa-4217 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14339 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%
bugs.wireshark.org/bugzilla/show_bug.cgi?id=14339 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8ed705e1227d3d582e3f0de435bba606d053d686 - https://www.wireshark.org/security/wnpa-sec-2018-07.html
CVE ID: CVE-2018-7335 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed in epan/crypt/airpdcap.c by rejecting lengths that are too small. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html - https://www.debian.org/security/2018/dsa-4217 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2901dcf45c9f1b07abfbf2a0b0cd654371d72a4 - https://www.wireshark.org/security/wnpa-sec-2018-05.html - htt
3Ba=commit%3Bh=a2901dcf45c9f1b07abfbf2a0b0cd654371d72a4 - https://www.wireshark.org/security/wnpa-sec-2018-05.html - http://www.securityfocus.com/bid/103165 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14442
CVE ID: CVE-2018-7336 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:12.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash. This was addressed in epan/dissectors/packet-fcp.c by checking for a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html - http://www.securityfocus.com/bid/103166 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14374 - https://www.wireshark.org/security/wnpa-sec-2018-09.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.htm
s://www.wireshark.org/security/wnpa-sec-2018-09.html - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b56f598f1bc04f5d00f13b38c713763928cedb7c
CVE ID: CVE-2018-7337 State: PUBLISHED Published: 2018-02-23T22:00:00 Last Updated: 2024-08-05T06:24:11.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/04/msg00018.html - http://www.securityfocus.com/bid/103164 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=511a8b0b546d25413e289dc5a7d3a455a33994c2 - https://bugs.wireshark.org/bugzilla/sh
/gitweb?p=wireshark.git%3Ba=commit%3Bh=511a8b0b546d25413e289dc5a7d3a455a33994c2 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14446 - https://www.wireshark.org/security/wnpa-sec-2018-08.html
CVE ID: CVE-2018-7339 State: PUBLISHED Published: 2018-02-23T14:00:00 Last Updated: 2024-08-05T06:24:11.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pingsuewim/libmp4_bof
CVE ID: CVE-2018-7340 State: PUBLISHED Published: 2019-04-17T14:01:03 Last Updated: 2024-08-05T06:24:11.848Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Duo Security Products: Duo Network Gateway Problem Types: CWE-287 Description: Duo Network Gateway 1.2.9 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulne
ce providers. Additional Analyst Notes: - CVE Program Container: References: - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations - https://www.kb.cert.org/vuls/id/475445
CVE ID: CVE-2018-7355 State: PUBLISHED Published: 2018-09-26T16:00:00 Last Updated: 2024-08-05T06:24:11.940Z Vendors: ZTE Products: MF65, MF65M1 Problem Types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to conduct reflected XSS or HTML injection attacks on the devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46102/ - http://suppo
ditional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46102/ - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009483
CVE ID: CVE-2018-7356 State: PUBLISHED Published: 2018-11-01T14:00:00 Last Updated: 2024-08-05T06:24:11.880Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ZTE Products: ZXR10 8905E Problem Types: TCP Initial Sequence Number (ISN) Reuse Description: All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009783
CVE ID: CVE-2018-7357 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T06:24:12.002Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ZTE Products: ZXHN H168N Problem Types: Improper Authorization Description: ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, which may allow an unauthorized user to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45972/ - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009523
CVE ID: CVE-2018-7358 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T06:24:11.858Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ZTE Products: ZXHN H168N Problem Types: Improper Authorization Description: ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105963 - https://www.exploit-db.com/exploits/45972/ - http://support.zte.com.cn/support/news/LoopholeInfoDetail.asp
/bid/105963 - https://www.exploit-db.com/exploits/45972/ - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009523
CVE ID: CVE-2018-7359 State: PUBLISHED Published: 2018-11-16T15:00:00 Last Updated: 2024-08-05T06:24:11.888Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ZTE Products: ZXHN F670 Problem Types: Heap-based Buffer Overflow Description: All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383
CVE ID: CVE-2018-7360 State: PUBLISHED Published: 2018-11-16T15:00:00 Last Updated: 2024-08-05T06:24:11.935Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ZTE Products: ZXHN F670 Problem Types: Information Exposure Description: All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383
CVE ID: CVE-2018-7361 State: PUBLISHED Published: 2018-11-16T15:00:00 Last Updated: 2024-08-05T06:24:12.047Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ZTE Products: ZXHN F670 Problem Types: NULL Pointer Dereference Description: All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383
CVE ID: CVE-2018-7362 State: PUBLISHED Published: 2018-11-16T15:00:00 Last Updated: 2024-08-05T06:24:11.938Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ZTE Products: ZXHN F670 Problem Types: Improper Access Control Description: All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383