Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5989 State: PUBLISHED Published: 2015-12-31T16:00:00 Last Updated: 2024-08-06T07:06:35.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes to LockStatus and Login_Success values. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/201168
CVE ID: CVE-2015-5990 State: PUBLISHED Published: 2015-12-31T16:00:00 Last Updated: 2024-08-06T07:06:35.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/201168
CVE ID: CVE-2015-5991 State: PUBLISHED Published: 2015-09-21T10:00:00 Last Updated: 2024-08-06T07:06:34.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to hijack the authentication of administrators for requests that perform setup operations, as demonstrated by modifying network settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/525276
CVE ID: CVE-2015-5992 State: PUBLISHED Published: 2015-09-21T10:00:00 Last Updated: 2024-08-06T07:06:35.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to inject arbitrary web script or HTML via the ssid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/525276
CVE ID: CVE-2015-5993 State: PUBLISHED Published: 2015-09-21T10:00:00 Last Updated: 2024-08-06T07:06:35.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in form2ping.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to cause a denial of service (device outage) via a long ipaddr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/525276
CVE ID: CVE-2015-5994 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:06:34.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 has a default password of admin for the admin account and a default password of password for the medialink account, which allows remote attackers to obtain administrative privileges by leveraging a Wi-Fi session. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/630872
CVE ID: CVE-2015-5995 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:06:35.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/630872
CVE ID: CVE-2015-5996 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:06:35.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45078/ - https://www.kb.cert.org/vuls/id/630872
CVE ID: CVE-2015-5997 State: PUBLISHED Published: 2015-09-14T14:00:00 Last Updated: 2024-08-06T07:06:34.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it easier for remote attackers to obtain plaintext data by sniffing the network for ciphertext data. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/549807
CVE ID: CVE-2015-5998 State: PUBLISHED Published: 2015-09-14T14:00:00 Last Updated: 2024-08-06T07:06:34.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Impero Education Pro before 5105 relies on the -1|AUTHENTICATE\x02PASSWORD string for authentication, which allows remote attackers to execute arbitrary programs via an encrypted command. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/549807
CVE ID: CVE-2015-5999 State: PUBLISHED Published: 2015-11-18T16:00:00 Last Updated: 2024-08-06T07:06:35.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Nov/45 - http://packetstormsecurity.com/fil
CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Nov/45 - http://packetstormsecurity.com/files/134379/D-Link-DIR-816L-Cross-Site-Request-Forgery.html - http://www.securityfocus.com/archive/1/536886/100/0/threaded - http://www.securityfocus.com/bid/77588 - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-816L/DIR-816L_REVB_FIRMWARE_PATCH_NOTES_2.06.B09_BETA_EN.PDF - https://www.exploit-db.com/exploits/38707/
CVE ID: CVE-2015-6000 State: PUBLISHED Published: 2020-02-06T13:55:09 Last Updated: 2024-08-06T07:06:35.224Z Vendors: Vtiger Products: Vtiger CRM Problem Types: File Upload Description: Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in test/logo/. Additional Analyst Notes: - CVE Program Container: References: - http://b.fl7.de/2015/09/vtiger-crm-authenticated-rce-cve-2015-6000.html - https://www.exp
ogram Container: References: - http://b.fl7.de/2015/09/vtiger-crm-authenticated-rce-cve-2015-6000.html - https://www.exploit-db.com/exploits/38345/ - http://www.securityfocus.com//archive/1/536563/100/0/threaded
CVE ID: CVE-2015-6003 State: PUBLISHED Published: 2015-10-16T01:00:00 Last Updated: 2024-08-06T07:06:34.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/751328 - http://www.securitytracker.com/id/1033794 - https://www.qnap.com/i/en/support/con_show.php?cid=85
CVE ID: CVE-2015-6004 State: PUBLISHED Published: 2015-12-27T02:00:00 Last Updated: 2024-08-06T07:06:35.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.asp in the Reports component or (2) the Find Device parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/176160 - http://twitter.com/ipswitch/statuses/677558623229317121 - http://www.securitytracker.com/id/1034833 - https://community.rapid7.com/community/infosec/blog/2015/12/16/
3229317121 - http://www.securitytracker.com/id/1034833 - https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems - http://www.securityfocus.com/bid/79506
CVE ID: CVE-2015-6005 State: PUBLISHED Published: 2015-12-27T02:00:00 Last Updated: 2024-08-06T07:06:35.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via (1) an SNMP OID object, (2) an SNMP trap message, (3) the View Names field, (4) the Group Names field, (5) the Flow Monitor Credentials field, (6) the Flow Monitor Threshold Name field, (7) the Task Library Name field, (8) the Task Library Description field, (9) the Policy Library Name field, (10) the Policy Library Description field, (11) the Template Library Name field, (1
, (9) the Policy Library Name field, (10) the Policy Library Description field, (11) the Template Library Name field, (12) the Template Library Description field, (13) the System Script Library Name field, (14) the System Script Library Description field, or (15) the CLI Settings Library Description field. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/176160 - http://twitter.com/ipswitch/statuses/677558623229317121 - http://www.securitytracker.com/id/1034833 - https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems - http://www.securityfocus.com/bid/79506
CVE ID: CVE-2015-6006 State: PUBLISHED Published: 2015-10-29T10:00:00 Last Updated: 2024-08-06T07:06:35.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service (integer truncation and heap-based buffer overflow) via a crafted packet on port 8190. Additional Analyst Notes: - CVE Program Container: References: - http://www.securifera.com/advisories/CVE-2015-2898-2901/ - http://www.kb.cert.org/vuls/id/675052
CVE ID: CVE-2015-6007 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:06:35.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-6008 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:06:35.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/38292/ - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-6009 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:06:34.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary SQL commands via (1) the where parameter to rss.php or (2) the sqlQuery parameter to search.php, a different issue than CVE-2015-7382. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/38292/ - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-6010 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:06:35.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to inject arbitrary web script or HTML via the (1) errorNo or (2) errorMsg parameter to error.php; the (3) viewType parameter to duplicate_manager.php; the (4) queryAction, (5) displayType, (6) citeOrder, (7) sqlQuery, (8) showQuery, (9) showLinks, (10) showRows, or (11) queryID parameter to query_manager.php; the (12) sourceText or (13) sourceIDs parameter to impo
, (10) showRows, or (11) queryID parameter to query_manager.php; the (12) sourceText or (13) sourceIDs parameter to import.php; or the (14) typeName or (15) fileName parameter to modify.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-6011 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:06:35.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection attacks via (1) the id parameter to unapi.php or (2) the stylesheet parameter to sru.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-6012 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:06:35.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the referrer parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-6013 State: PUBLISHED Published: 2016-01-22T15:00:00 Last Updated: 2024-08-06T07:06:35.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote att
claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted WK4 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/81227 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.kb.cert.org/vuls/id/916896 - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2015-6014 State: PUBLISHED Published: 2016-01-22T15:00:00 Last Updated: 2024-08-06T07:06:34.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013, CVE-2015-6015, and CVE-2016-0432. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote att
claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted DOC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.kb.cert.org/vuls/id/916896 - http://www.securityfocus.com/bid/81233 - http://www.securitytracker.com/id/1034711
CVE ID: CVE-2015-6015 State: PUBLISHED Published: 2016-01-22T15:00:00 Last Updated: 2024-08-06T07:06:34.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6013, CVE-2015-6014, and CVE-2016-0432. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote att
claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted Paradox DB file. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://www.kb.cert.org/vuls/id/916896 - http://www.securitytracker.com/id/1034711 - http://www.securityfocus.com/bid/81243
CVE ID: CVE-2015-6016 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:06:35.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034554 - http://www.securitytracker.com/id/1034553 - http://www.securitytracker.com/id/1034552 - https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R - https://www.kb.cer
d/1034553 - http://www.securitytracker.com/id/1034552 - https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R - https://www.kb.cert.org/vuls/id/870744
CVE ID: CVE-2015-6017 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:06:35.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attackers to inject arbitrary web script or HTML via the (1) LoginPassword or (2) hiddenPassword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034552 - https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R - https://www.kb.cert.org/vuls/id/870744
CVE ID: CVE-2015-6018 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:06:34.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034553 - https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R - https://www.exploit-db.com/exploits/38455/ - https://www.kb.cert.org/vuls/id/870744
CVE ID: CVE-2015-6019 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:06:34.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate sessions upon a logout action, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034553 - https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R - https://www.kb.cert.org/vuls/id/870744
CVE ID: CVE-2015-6020 State: PUBLISHED Published: 2015-12-31T02:00:00 Last Updated: 2024-08-06T07:06:35.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative privileges by leveraging access to the user account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034553 - https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R - https://www.kb.cert.org/vuls/id/870744
CVE ID: CVE-2015-6021 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T07:06:35.240Z Vendors: n/a Products: Spiceworks Desktop before 2015-12-01 Problem Types: XSS Description: Spiceworks Desktop before 2015-12-01 has XSS via an SNMP response. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems
CVE ID: CVE-2015-6022 State: PUBLISHED Published: 2016-02-27T02:00:00 Last Updated: 2024-08-06T07:06:34.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/444472
CVE ID: CVE-2015-6023 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T07:06:35.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39762/ - http://seclists.org/fulldisclosure/2016/May/18 - http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Co
sclosure/2016/May/18 - http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.html - http://www.securityfocus.com/archive/1/538297/100/0/threaded - http://seclists.org/fulldisclosure/2016/May/13 - http://www.securityfocus.com/archive/1/538263/100/0/threaded - http://www.securityfocus.com/bid/96383
CVE ID: CVE-2015-6024 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T07:06:34.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39762/ - http://seclists.org/fulldisclosure/2016/May/18 - http://packetstormsecurity.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.html - http://www.securityfocus.co
ty.com/files/136901/NetCommWireless-HSPA-3G10WVE-Authentication-Bypass-Code-Execution.html - http://www.securityfocus.com/archive/1/538297/100/0/threaded - http://seclists.org/fulldisclosure/2016/May/13 - http://www.securityfocus.com/archive/1/538263/100/0/threaded
CVE ID: CVE-2015-6027 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T07:06:35.204Z Vendors: n/a Products: Castle Rock Computing SNMPc before 2015-12-17 Problem Types: XSS Description: Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems