Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-12885 State: PUBLISHED Published: 2018-08-07T15:00:00 Last Updated: 2024-08-05T08:45:02.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, (which can be read with a getStorageAt call). Therefore, attackers can get powerful champs/items and get rewards. Additional Analyst Notes: - CVE Program Container: References: - https://etherscan.io/address/0xa44e464b13280340904ffef0a65b8a0033460430 - https://medium.com/coinmonks/get-legendary-items-by-breaking-
an.io/address/0xa44e464b13280340904ffef0a65b8a0033460430 - https://medium.com/coinmonks/get-legendary-items-by-breaking-pnrg-of-mycyptochamp-an-ethereum-online-game-cve-2018-12855-6e6beb41b8df - https://etherscan.io/address/0x689FB61845488297dfE7586E5f7956475955d2Dc
CVE ID: CVE-2018-12886 State: PUBLISHED Published: 2019-05-22T18:42:10 Last Updated: 2024-08-05T08:45:02.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against. Additional Analyst Notes: - CVE
xplicit against stack overflow by controlling what the stack canary is compared against. Additional Analyst Notes: - CVE Program Container: References: - https://www.gnu.org/software/gcc/gcc-8/changes.html - https://gcc.gnu.org/viewcvs/gcc/trunk/gcc/config/arm/arm-protos.h?revision=266379&view=markup
CVE ID: CVE-2018-12889 State: PUBLISHED Published: 2018-06-26T13:00:00Z Last Updated: 2024-09-16T17:39:17.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory management in mkAddToRelayCacheRequest in ccn-lite-ctrl.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cn-uofbasel/ccn-lite/issues/279
CVE ID: CVE-2018-12891 State: PUBLISHED Published: 2018-07-02T17:00:00 Last Updated: 2024-08-05T08:45:02.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to process. For that reason Xen explicitly checks for the need to preempt the current vCPU at certain points. A few rarely taken code paths did bypass such checks. By suitably enforcing the conditions through its own page table contents, a malicious guest may cause such bypasses to be used for an unbounded number of iterations. A malicious or buggy PV guest may cause a Denial of Service (DoS) affecting the entire host. Specifically,
iterations. A malicious or buggy PV guest may cause a Denial of Service (DoS) affecting the entire host. Specifically, it may prevent use of a physical CPU for an indeterminate period of time. All Xen versions from 3.4 onwards are vulnerable. Xen versions 3.3 and earlier are vulnerable to an even wider class of attacks, due to them lacking preemption checks altogether in the affected code paths. Only x86 systems are affected. ARM systems are not affected. Only multi-vCPU x86 PV guests can leverage the vulnerability. x86 HVM or PVH guests as well as x86 single-vCPU PV ones cannot leverage the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.o
cannot leverage the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4236 - https://support.citrix.com/article/CTX235748 - https://security.gentoo.org/glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html - http://xenbits.xen.org/xsa/advisory-264.html - http://www.securitytracker.com/id/1041201 - http://www.openwall.com/lists/oss-security/2018/06/27/10 - http://www.securityfocus.com/bid/104570
CVE ID: CVE-2018-12892 State: PUBLISHED Published: 2018-07-02T17:00:00 Last Updated: 2024-08-05T08:45:02.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Malicious guest administrators or (in some situations) users may be able to write to supposedly read-only disk images. Only emulated SCSI disks (specified as "sd" in the libxl disk configuration, or an equivalent) are affected. IDE disks ("hd") are not affected (because attempts to make them readonly are rejected). Additionally, CDROM dev
fected. IDE disks ("hd") are not affected (because attempts to make them readonly are rejected). Additionally, CDROM devices (that is, devices specified to be presented to the guest as CDROMs, regardless of the nature of the backing storage on the host) are not affected; they are always read only. Only systems using qemu-xen (rather than qemu-xen-traditional) as the device model version are vulnerable. Only systems using libxl or libxl-based toolstacks are vulnerable. (This includes xl, and libvirt with the libxl driver.) The vulnerability is present in Xen versions 4.7 and later. (In earlier versions, provided that the patch for XSA-142 has been applied, attempts to create read only disks a
later. (In earlier versions, provided that the patch for XSA-142 has been applied, attempts to create read only disks are rejected.) If the host and guest together usually support PVHVM, the issue is exploitable only if the malicious guest administrator has control of the guest kernel or guest kernel command line. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4236 - https://security.gentoo.org/glsa/201810-06 - http://www.securityfocus.com/bid/104571 - http://xenbits.xen.org/xsa/advisory-266.html - http://www.securitytracker.com/id/1041203 - http://www.openwall.com/lists/oss-security/2018/06/27/12
CVE ID: CVE-2018-12893 State: PUBLISHED Published: 2018-07-02T17:00:00 Last Updated: 2024-08-05T08:45:02.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leading to a Denial of Service. All Xen systems which have applied the XSA-260 fix are vulnerable. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests ca
vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests cannot exploit the vulnerability. An attacker needs to be able to control hardware debugging facilities to exploit the vulnerability, but such permissions are typically available to unprivileged users. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/06/27/11 - https://www.debian.org/security/2018/dsa-4236 - https://support.citrix.com/article/CTX235748 - https://security.gentoo.org/glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html - https://bugzilla.redhat.com/show_bug.cgi?id=159
6 - https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html - https://bugzilla.redhat.com/show_bug.cgi?id=1590979 - http://xenbits.xen.org/xsa/advisory-265.html - http://www.securityfocus.com/bid/104572 - http://www.securitytracker.com/id/1041202
CVE ID: CVE-2018-12895 State: PUBLISHED Published: 2018-06-26T20:00:00 Last Updated: 2024-08-05T08:45:02.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then l
ilable only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/ - http://www.securityfocus.com/bid/104569 - https://www.debian.org/security/2018/dsa-4250 - https://wpvulndb.com/vulnerabilities/9100 - https://lists.debian.org/debian-lts-announce/2018/07/msg00046.html - http://packetstormsecurity.com/files/164633/WordPress-4.9.6-Arbitrary-File-Deletion.html
CVE ID: CVE-2018-12896 State: PUBLISHED Published: 2018-07-02T17:00:00 Last Updated: 2024-08-05T08:45:02.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically makes the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted
info::si_overrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=200189 - https://usn.ubuntu.com/3848-2/ - https://usn.ubuntu.com/3847-1/ - https://github.com/torvalds/linux/commit/78c9c4dfbf8c04883941445a195276bb4bb92c76 - https://usn.ubuntu.com/3847-2/ - https://usn.ubuntu.com/3849-1/ - https://usn.ubuntu.com/3849-2/ - https://usn.ubuntu.com/3848-1/ - https://usn.ubuntu.com/3847-3/ - https://github.com/lcytxw/bug_repro/tree/master/bug_200189 - https://lists.debian.org/de
ttps://usn.ubuntu.com/3847-3/ - https://github.com/lcytxw/bug_repro/tree/master/bug_200189 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
CVE ID: CVE-2018-12897 State: PUBLISHED Published: 2018-09-07T22:00:00 Last Updated: 2024-08-05T08:45:02.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://labs.nettitude.com/blog/solarwinds-cve-2018-12897-dameware-mini-remote-control-local-seh-buffer-overflow/ - http://packetstormsecurity.com/files/153668/DameWare-Remote-Support-12.0.0.509-Buffer-Overflow.html
CVE ID: CVE-2018-12900 State: PUBLISHED Published: 2018-06-26T22:00:00 Last Updated: 2024-08-05T08:45:02.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2798 - https://usn.ubuntu.com/390
s: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2798 - https://usn.ubuntu.com/3906-1/ - https://usn.ubuntu.com/3906-2/ - https://access.redhat.com/errata/RHSA-2019:2053 - https://access.redhat.com/errata/RHSA-2019:3419 - https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html - https://www.debian.org/security/2020/dsa-4670 - https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-12900
CVE ID: CVE-2018-12901 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T08:45:02.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the signin.php page. A successful exploit could allow an attacker to execute arbitrary scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0007
CVE ID: CVE-2018-12902 State: PUBLISHED Published: 2018-06-26T22:00:00 Last Updated: 2024-08-05T08:45:02.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lzlzh2016/easymagazine/blob/master/xx1.md
CVE ID: CVE-2018-12903 State: PUBLISHED Published: 2018-06-26T22:00:00 Last Updated: 2024-08-05T08:45:02.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts->DisplayName screen, a user's groups in ConfigurationPage, the Dialog Title field, and App Group Name in the Application Group Wizard. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2018/06/exploiting-cyberark-1021603.html
CVE ID: CVE-2018-12904 State: PUBLISHED Published: 2018-06-27T11:00:00 Last Updated: 2024-08-05T08:45:02.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://github.com/torvalds/linux/commit/727ba748e110b4de50d142edca9d6a9b7e6111d8 - https://usn.ubuntu.com/3752-3/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.2 - h
2edca9d6a9b7e6111d8 - https://usn.ubuntu.com/3752-3/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.2 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1589 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=727ba748e110b4de50d142edca9d6a9b7e6111d8 - https://usn.ubuntu.com/3752-1/ - https://www.exploit-db.com/exploits/44944/
CVE ID: CVE-2018-12905 State: PUBLISHED Published: 2018-06-27T13:00:00Z Last Updated: 2024-09-16T19:55:40.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: joyplus-cms 1.6.0 has XSS in admin_player.php, related to manager/index.php "system manage" and "add" actions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joyplus/joyplus-cms/issues/427
CVE ID: CVE-2018-12907 State: PUBLISHED Published: 2018-06-27T13:00:00 Last Updated: 2024-08-05T08:45:02.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmission of any URL's content to Google, because there is no validation of a URL field received from the Google Cloud Storage API server, aka a "RESTLESS" issue. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2018/06/27/3 - https://www.danieldent.com/blog/restless-vulnerability-non-browser-cross-domain-http-request-attacks/
CVE ID: CVE-2018-12908 State: PUBLISHED Published: 2018-06-27T16:00:00 Last Updated: 2024-08-05T08:45:02.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44977/ - https://cxsecurity.com/issue/WLB-2018060325
CVE ID: CVE-2018-12909 State: PUBLISHED Published: 2018-06-27T16:00:00Z Last Updated: 2024-09-17T00:42:15.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jokkedk/webgrind/issues/112
CVE ID: CVE-2018-12910 State: PUBLISHED Published: 2018-07-05T18:00:00 Last Updated: 2024-08-05T08:45:02.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SBREWZ3EEDYWG6PCLWL2EJ24ME5ZFAX6/ - https://gitlab.gnome.org/GNOME/libsoup/issues/3 - https://access.redhat.com/errata/RHSA-2018:3505 - https://www.debian.org/security/2018/dsa-4241 - https://lists.debian.org/debian-lts-announce/2018/07/m
/RHSA-2018:3505 - https://www.debian.org/security/2018/dsa-4241 - https://lists.debian.org/debian-lts-announce/2018/07/msg00007.html - https://usn.ubuntu.com/3701-1/ - https://access.redhat.com/errata/RHSA-2018:3140 - https://gitlab.gnome.org/GNOME/gnome-sdk-images/commit/4215b8a21b3b3055e947312a8920df94f93ba047 - https://gitlab.gnome.org/GNOME/libsoup/commit/db2b0d5809d5f8226d47312b40992cadbcde439f - https://access.redhat.com/errata/RHBA-2019:0327 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00003.html
CVE ID: CVE-2018-12911 State: PUBLISHED Published: 2018-07-19T13:00:00 Last Updated: 2024-08-05T08:45:02.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3743-1/ - https://trac.webkit.org/changeset/233404/webkit
CVE ID: CVE-2018-12912 State: PUBLISHED Published: 2018-06-27T18:00:00 Last Updated: 2024-08-05T08:45:02.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44953/ - https://github.com/Neeke/HongCMS/issues/4
CVE ID: CVE-2018-12913 State: PUBLISHED Published: 2018-06-27T18:00:00 Last Updated: 2024-08-05T08:45:02.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter can both remain equal to zero. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/richgel999/miniz/issues/90
CVE ID: CVE-2018-12914 State: PUBLISHED Published: 2018-06-27T18:00:00 Last Updated: 2024-08-05T08:45:02.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sanluan/PublicCMS/issues/13
CVE ID: CVE-2018-12915 State: PUBLISHED Published: 2018-06-27T18:00:00Z Last Updated: 2024-09-16T17:43:03.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calc_hash in map.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/118
CVE ID: CVE-2018-12916 State: PUBLISHED Published: 2018-06-27T18:00:00Z Last Updated: 2024-09-17T04:25:12.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcP_message_default in proto.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/120
CVE ID: CVE-2018-12917 State: PUBLISHED Published: 2018-06-27T18:00:00Z Last Updated: 2024-09-16T23:06:46.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in _pbcM_ip_new in map.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/119
CVE ID: CVE-2018-12918 State: PUBLISHED Published: 2018-06-27T18:00:00Z Last Updated: 2024-09-16T19:25:31.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcB_register_fields in bootstrap.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwu/pbc/issues/121
CVE ID: CVE-2018-12919 State: PUBLISHED Published: 2018-06-27T18:00:00 Last Updated: 2024-08-05T08:45:02.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lzlzh2016/CraftedWeb/blob/master/xss.md
CVE ID: CVE-2018-12920 State: PUBLISHED Published: 2018-06-28T11:00:00 Last Updated: 2024-08-05T08:45:02.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettings or basic.html#datadelivery URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97370
CVE ID: CVE-2018-12921 State: PUBLISHED Published: 2018-06-28T11:00:00 Last Updated: 2024-08-05T08:45:02.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the meter_information.htm, diag_system.htm, or diag_dnp_lan_wan.htm URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97371
CVE ID: CVE-2018-12922 State: PUBLISHED Published: 2018-06-28T11:00:00 Last Updated: 2024-08-05T08:45:02.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/configTelnet.htm URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97372