Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5525 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-17T04:29:38.837Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: Data leak Description: A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration data, proxied traffic, or other potentially sensitive customer data. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/arti
ensitive customer data. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K00363258 - http://www.securitytracker.com/id/1041018
CVE ID: CVE-2018-5526 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-17T03:07:55.539Z Vendors: F5 Networks, Inc. Products: BIG-IP (ASM) Problem Types: DoS Description: Under certain conditions, on F5 BIG-IP ASM 13.1.0-13.1.0.5, Behavioral DOS (BADOS) protection may fail during an attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041019 - http://www.securityfocus.com/bid/104470 - https://support.f5.com/csp/article/K62201098
CVE ID: CVE-2018-5527 State: PUBLISHED Published: 2018-06-27T20:00:00Z Last Updated: 2024-09-16T19:14:47.180Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel (tmm) to leak memory. As a result, system memory usage increases over time, which may eventually cause a decrease in performance or a system reboot due to memory exhaus
usage increases over time, which may eventually cause a decrease in performance or a system reboot due to memory exhaustion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041196 - https://support.f5.com/csp/article/K20134942
CVE ID: CVE-2018-5528 State: PUBLISHED Published: 2018-06-27T20:00:00Z Last Updated: 2024-09-16T17:58:02.368Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM) Problem Types: DoS Description: Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041197 - https://support.f5.com/csp/article/K27044729
CVE ID: CVE-2018-5529 State: PUBLISHED Published: 2018-07-12T18:00:00Z Last Updated: 2024-09-16T18:55:42.284Z Vendors: F5 Networks, Inc. Products: BIG-IP APM client for Linux and Mac OSX Problem Types: Privilege Escalation Description: The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104730 - https://support.
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104730 - https://support.f5.com/csp/article/K52171282 - https://github.com/mirchr/security-research/blob/master/vulnerabilities/F5/CVE-2018-5529.txt
CVE ID: CVE-2018-5530 State: PUBLISHED Published: 2018-07-25T14:00:00Z Last Updated: 2024-09-16T23:16:55.834Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, Edge Gateway, PEM, WebSafe) Problem Types: DoS Description: F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104908 - https://support.f5.com/csp/article/K45611803
CVE ID: CVE-2018-5531 State: PUBLISHED Published: 2018-07-25T14:00:00Z Last Updated: 2024-09-17T01:16:58.116Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP guest and host systems. Attack must be sourced from adjacent network (layer 2). Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K64721111
CVE ID: CVE-2018-5532 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-17T01:35:33.567Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: Information leakage Description: On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041345 - http
name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041345 - https://support.f5.com/csp/article/K48224824
CVE ID: CVE-2018-5533 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-16T17:37:45.564Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041342 - https://support.f5.com/csp/article/K45325728
CVE ID: CVE-2018-5534 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-16T18:18:22.078Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041343 - https://support.f5.com/csp/article/K64552448
CVE ID: CVE-2018-5535 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-16T18:09:00.440Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K196
ial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K19634255 - http://www.securitytracker.com/id/1041344
CVE ID: CVE-2018-5536 State: PUBLISHED Published: 2018-07-25T14:00:00Z Last Updated: 2024-09-16T17:18:15.658Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM) Problem Types: DoS Description: A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM per-request policy object and cause a memory leak in the APM module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104922 - https://support.f5.com/csp/article/K27391542
CVE ID: CVE-2018-5537 State: PUBLISHED Published: 2018-07-25T14:00:00Z Last Updated: 2024-09-16T16:13:34.696Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, APM, ASM, Edge Gateway, GTM, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: A remote attacker may be able to disrupt services on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 if the TMM virtual server is configured with a HTML or a Rewrite profile. TMM may restart while processing some specially prepared HTML content from the back end. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K94105051
CVE ID: CVE-2018-5538 State: PUBLISHED Published: 2018-07-25T14:00:00Z Last Updated: 2024-09-17T03:38:36.291Z Vendors: F5 Networks, Inc. Products: BIG-IP (DNS) Problem Types: DoS Description: On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable "dnsexpress.notifyport" is set to any value other than the default of "0". Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K45435121
CVE ID: CVE-2018-5539 State: PUBLISHED Published: 2018-07-25T14:00:00Z Last Updated: 2024-09-16T17:54:14.220Z Vendors: F5 Networks, Inc. Products: BIG-IP (ASM) Problem Types: DoS Description: Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11.5.1-11.5.6, or 11.2.1, when processing CSRF protections, the BIG-IP ASM bd process may restart and produce a core file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104921 - https://support.f5.com/csp/article/K75432956
CVE ID: CVE-2018-5540 State: PUBLISHED Published: 2018-07-19T14:00:00Z Last Updated: 2024-09-17T00:36:23.820Z Vendors: F5 Networks, Inc. Products: BIG-IP (DNS, GTM), Enterprise Manager, BIG-IQ Centralized Management, BIG-IQ Cloud and Orchestration, F5 iWorkflow Problem Types: Privilege escalation Description: On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/
privileges at start up. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041340 - https://support.f5.com/csp/article/K82038789 - http://www.securityfocus.com/bid/104920 - http://www.securitytracker.com/id/1041341
CVE ID: CVE-2018-5541 State: PUBLISHED Published: 2018-07-25T14:00:00Z Last Updated: 2024-09-16T17:33:47.886Z Vendors: F5 Networks, Inc. Products: BIG-IP (ASM) Problem Types: DoS Description: When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104906 - https://support.f5.com/csp/article/K12403422
CVE ID: CVE-2018-5542 State: PUBLISHED Published: 2018-07-25T14:00:00Z Last Updated: 2024-09-16T23:30:27.215Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: Information disclosure Description: F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not validate the identity of the monitored server. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K05112543
CVE ID: CVE-2018-5543 State: PUBLISHED Published: 2018-07-31T14:00:00Z Last Updated: 2024-09-17T00:21:43.481Z Vendors: F5 Networks, Inc. Products: F5 Container Connector Problem Types: Information Disclosure Description: The F5 BIG-IP Controller for Kubernetes 1.0.0-1.5.0 (k8s-bigip-crtl) passes BIG-IP username and password as command line parameters, which may lead to disclosure of the credentials used by the container. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104944 - https://support.f5.com/csp/article/K58935003
CVE ID: CVE-2018-5544 State: PUBLISHED Published: 2018-07-31T14:00:00Z Last Updated: 2024-09-16T16:53:28.245Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM) Problem Types: Information Disclosure Description: When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon agent or a confirm box), the BIG-IP APM may disclose configuration information such as partition and agent names via URI parameters. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K23024812 - http://www.securitytracker.com/id/1041398 - http://www.securityfocus.com/bid/104932
CVE ID: CVE-2018-5545 State: PUBLISHED Published: 2018-09-13T14:00:00Z Last Updated: 2024-09-17T02:01:42.301Z Vendors: F5 Networks, Inc. Products: F5 WebSafe Alert Server Problem Types: Remote Code Execution Description: On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K20226900 - http://www.securityfocus.com/bid/105344
CVE ID: CVE-2018-5546 State: PUBLISHED Published: 2018-08-17T13:00:00Z Last Updated: 2024-09-17T02:31:29.055Z Vendors: F5 Networks, Inc. Products: BIG-IP APM client for Linux, BIG-IP APM client for macOS Problem Types: Privilege Escalation Description: The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host. Additional Analyst Notes: - CVE Program Con
late certain data, or assume super-user privileges on the local client host. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K54431371 - http://www.securitytracker.com/id/1041510 - https://github.com/mirchr/security-research/blob/master/vulnerabilities/F5/CVE-2018-5529.txt
CVE ID: CVE-2018-5547 State: PUBLISHED Published: 2018-08-17T13:00:00Z Last Updated: 2024-09-17T00:21:43.921Z Vendors: F5 Networks, Inc. Products: BIG-IP APM client for Windows Problem Types: Privilege Escalation Description: Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy. By clicking on the link, unprivileged users can open additional dialog boxes and get access to the local machine windows explorer which can be used to get administrator privil
ditional dialog boxes and get access to the local machine windows explorer which can be used to get administrator privilege. Windows Logon Integration is vulnerable when the APM client is installed by an administrator on a user machine. Users accessing the local machine can get administrator privileges Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K10015187 - http://www.securitytracker.com/id/1041511 - https://support.f5.com/csp/article/K10015187?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-5548 State: PUBLISHED Published: 2018-09-13T14:00:00Z Last Updated: 2024-09-16T19:41:32.544Z Vendors: F5 Networks, Inc. Products: BIG-IP APM Problem Types: XSS Description: On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an undisclosed /vdesk link of APM virtual server configured with an access profile, allowing a malicious user to build a redirect URI value using different blocks of cipher texts. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K66171422 - http://sbudella.altervista.org/blog/20180911-cve-2018-5548.html - http://www.securityfocus.com/bid/105353
CVE ID: CVE-2018-5549 State: PUBLISHED Published: 2018-09-13T14:00:00Z Last Updated: 2024-09-16T19:31:08.987Z Vendors: F5 Networks, Inc. Products: BIG-IP APM Problem Types: DoS Description: On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertion or response containing certain elements. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K05018525 - http://www.securityfocus.com/bid/105345
CVE ID: CVE-2018-5550 State: PUBLISHED Published: 2018-02-08T19:00:00 Last Updated: 2024-08-05T05:40:50.577Z Vendors: Epson Products: Epson AirPrint Problem Types: CWE-79 Description: Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user. Additional Analyst Notes: - CVE Program Container: References: - https://epson.com/support/wa00860 - https://blog.rapid7.com/2018/02/08/r7-2017-28-epson-airprint-xss-cve-2018-5550/
CVE ID: CVE-2018-5551 State: PUBLISHED Published: 2018-03-19T15:00:00 Last Updated: 2024-08-05T05:40:50.612Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: DocuTrac Products: DTISQLInstaller.exe Problem Types: CWE-798 Description: Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contain three credentials with known passwords: QDMaster, OTMaster, and sa. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2018/03/14/r7-2018-01-cve-2018-5551-cve-2018-5552-docutrac-office-therapy-installer-hard-coded-credentials-and-cryptographic-salt/
CVE ID: CVE-2018-5552 State: PUBLISHED Published: 2018-03-19T15:00:00 Last Updated: 2024-08-05T05:40:50.601Z Severity: LOW (CVSS 2.9 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: DocuTrac Products: DTISQLInstaller.exe Problem Types: CWE-760 Description: Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper". Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2018/03/14/r7-2018-01-cve-2018-5551-cve-2018-5552-docutrac-office-therapy-installer-hard-coded-credentials-and-cryptographic-salt/
CVE ID: CVE-2018-5553 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-16T22:20:46.752Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Crestron Products: DGE-100, TS-1542-C, DM-DGE-200-C Problem Types: CWE-78 Description: The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access. Additional Analyst Notes: - CVE Program Container: References: - https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-secu
References: - https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE%C2%AD-2018%C2%AD-5553 - https://blog.rapid7.com/2018/06/12/r7-2018-15-cve-2018-5553-crestron-dge-100-console-command-injection-fixed/
CVE ID: CVE-2018-5559 State: PUBLISHED Published: 2018-11-28T19:00:00Z Last Updated: 2024-09-17T02:47:31.152Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N) Vendors: Rapid7 Products: Komand Problem Types: CWE-212, Improper Cross-boundary Removal of Sensitive Data Description: In Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always encrypted-at-rest connection data could return some configurations of connection data without obscuring sensitive data from the API response sent over an encrypted channel. This issue does not affect Rapid7 Komand version 0.42.0 and later versions. Additional Analyst Notes: - CVE Program Container: Refere
es not affect Rapid7 Komand version 0.42.0 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.alexanderjaeger.de/cve-2018-5559_my_first_cve/ - https://docs.komand.com/docs/release-notes#section-komand-v0-42-0-2018-11-1
CVE ID: CVE-2018-5560 State: PUBLISHED Published: 2019-01-31T21:00:00Z Last Updated: 2024-09-16T21:04:09.840Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Practecol, LLC Products: Guardzilla All-In-One Video Security System Problem Types: CWE-798, Use of Hard-coded Credentials Description: A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device. Additional Analyst Notes: - CVE Program Container: References: - https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-cred
yst Notes: - CVE Program Container: References: - https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/ - https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/
CVE ID: CVE-2018-5650 State: PUBLISHED Published: 2018-01-12T22:00:00 Last Updated: 2024-08-05T05:40:50.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the unzip_match function in runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/88 - https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html
CVE ID: CVE-2018-5651 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_start parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9008 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.md
CVE ID: CVE-2018-5652 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_end parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9008 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.md