Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-25009 State: PUBLISHED Published: 2021-05-21T16:22:38 Last Updated: 2024-08-05T12:26:39.453Z Vendors: n/a Products: libwebp Problem Types: CWE-125 Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16(). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956917 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9100 - https://chromium.googlesource.com/webm/libwebp/+/95fd65070662e01cc9170c4444f5c0859a710097
CVE ID: CVE-2018-25010 State: PUBLISHED Published: 2021-05-21T16:24:23 Last Updated: 2024-08-05T12:26:39.513Z Vendors: n/a Products: libwebp Problem Types: CWE-125 Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter(). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956918 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9105 - https://chromium.googlesource.com/webm/libwebp/+/1344a2e947c749d231141a295327e5b99b444d63
CVE ID: CVE-2018-25011 State: PUBLISHED Published: 2021-05-21T16:25:40 Last Updated: 2024-08-05T12:26:39.464Z Vendors: n/a Products: libwebp Problem Types: CWE-787 Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16(). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956919 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9119 - https://chromium.googlesource.com/webm/libwebp/+/v1.0.1 - https://chromium.googlesource.com/webm/libwebp/+log/be738c6d396fa5a272c1b209be4379a7532debfe..29fb8562c60b5a919a75d904ff7366af423f8ab9?pretty=fuller&n=10000
CVE ID: CVE-2018-25012 State: PUBLISHED Published: 2021-05-21T16:26:31 Last Updated: 2024-08-05T12:26:39.460Z Vendors: n/a Products: libwebp Problem Types: CWE-125 Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24(). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956922 - https://chromium.googlesource.com/webm/libwebp/+/95fd65070662e01cc9170c4444f5c0859a710097 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9123
CVE ID: CVE-2018-25013 State: PUBLISHED Published: 2021-05-21T16:27:13 Last Updated: 2024-08-05T12:26:39.668Z Vendors: n/a Products: libwebp Problem Types: CWE-125 Description: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes(). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956926 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9417 - https://chromium.googlesource.com/webm/libwebp/+/907208f97ead639bd521cf355a2f203f462eade6
CVE ID: CVE-2018-25014 State: PUBLISHED Published: 2021-05-21T16:27:57 Last Updated: 2024-08-05T12:26:39.521Z Vendors: n/a Products: libwebp Problem Types: CWE-908 Description: A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956927 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9496 - https://chromium.googlesource.com/webm/libwebp/+log/78ad57a36ad69a9c22874b182d49d64125c380f2..907208f97ead639bd52
CVE ID: CVE-2018-25015 State: PUBLISHED Published: 2021-06-07T19:20:39 Last Updated: 2024-08-05T12:26:39.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8. Additional Analyst Notes: - CVE Program Container: References: - https://syzkaller.appspot.com/bug?id=a8d38d1b68ffc744c53bd9b9fc1dbd6c86b1afe2 - https://sites.google.com/view/syzscope/warning-held-lock-freed - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a0ff660058b88d12625a783ce9e5c1371c87951f - https://cdn.kernel.org/pub/linux/kern
ernel/git/torvalds/linux.git/commit/?id=a0ff660058b88d12625a783ce9e5c1371c87951f - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.16 - https://security.netapp.com/advisory/ntap-20210720-0002/
CVE ID: CVE-2018-25016 State: PUBLISHED Published: 2021-06-21T14:08:21 Last Updated: 2024-08-05T12:26:39.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/greenbone/gsa/pull/318 - https://github.com/greenbone/gsa/releases/tag/v7.0.3
CVE ID: CVE-2018-25017 State: PUBLISHED Published: 2021-07-01T02:53:50 Last Updated: 2024-08-05T12:26:39.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: RawSpeed (aka librawspeed) 3.1 has a heap-based buffer overflow in TableLookUp::setTable. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5256 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/librawspeed/OSV-2018-227.yaml - https://github.com/darktable-org/rawspeed/commit/dbe7591e54bad5e6430d38be6bed051582da76b9
CVE ID: CVE-2018-25018 State: PUBLISHED Published: 2021-07-01T02:54:03 Last Updated: 2024-08-05T12:26:39.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2018-204.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9845 - https://github.com/aawc/unrar/releases
CVE ID: CVE-2018-25019 State: PUBLISHED Published: 2021-11-01T08:45:52 Last Updated: 2024-08-05T12:26:39.672Z Vendors: Unknown Products: LearnDash LMS Problem Types: CWE-434, CWE-862 Description: The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploaded in the learndash_assignment_process_init() function, which could allow unauthenticated users to upload arbitrary files to the web server Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2018/01/10/17 - https://wpscan.com/vulnerability/9444f67b-8e3d-4cf0-b319-ed25e7db383a
CVE ID: CVE-2018-25020 State: PUBLISHED Published: 2021-12-08T04:47:45 Last Updated: 2024-08-05T12:26:39.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/050fad7c4534c13c8eb1d9c2ba66012e014773cb - https://security.netapp.com/advisory/ntap-20211229-0005/ - http://packetstormsecurity.com/files/16
9c2ba66012e014773cb - https://security.netapp.com/advisory/ntap-20211229-0005/ - http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html
CVE ID: CVE-2018-25021 State: PUBLISHED Published: 2021-12-13T00:53:52 Last Updated: 2024-08-05T12:26:39.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TokTok/c-toxcore/issues/1214 - https://github.com/TokTok/c-toxcore/pull/1216 - https://blog.tox.chat/2018/10/memory-leak-bug-and-new-toxcore-release-fixing-it/
CVE ID: CVE-2018-25022 State: PUBLISHED Published: 2021-12-13T00:53:11 Last Updated: 2024-08-05T12:26:39.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address (when knowing only their Tox Id) by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion connection with the attacker, guessing the target's DHT public key and creating a DHT node with public key close to it, and finally onion-routing a NAT Ping Request to the target, requesting it to ping the just created DHT node. Additio
it, and finally onion-routing a NAT Ping Request to the target, requesting it to ping the just created DHT node. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TokTok/c-toxcore/issues/873 - https://github.com/TokTok/c-toxcore/pull/872 - https://blog.tox.chat/2018/04/security-vulnerability-and-new-toxcore-release
CVE ID: CVE-2018-25023 State: PUBLISHED Published: 2021-12-26T00:00:00 Last Updated: 2024-11-18T19:57:59.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rustsec.org/advisories/RUSTSEC-2018-0018.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/smallvec/RUSTSEC-2018-0018.md - https://github.com/servo/rust-smallvec/commit/e64afc8c473d43e375ab42bd33db2d0d4ac4e41b
CVE ID: CVE-2018-25024 State: PUBLISHED Published: 2021-12-26T21:55:34 Last Updated: 2024-08-05T12:26:39.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0019.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/actix-web/RUSTSEC-2018-0019.md
CVE ID: CVE-2018-25025 State: PUBLISHED Published: 2021-12-26T21:55:22 Last Updated: 2024-08-05T12:26:39.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0019.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/actix-web/RUSTSEC-2018-0019.md
CVE ID: CVE-2018-25026 State: PUBLISHED Published: 2021-12-26T21:55:11 Last Updated: 2024-08-05T12:26:39.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0019.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/actix-web/RUSTSEC-2018-0019.md
CVE ID: CVE-2018-25027 State: PUBLISHED Published: 2021-12-26T21:54:56 Last Updated: 2024-08-05T12:26:39.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_format_info can cause a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0021.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
CVE ID: CVE-2018-25028 State: PUBLISHED Published: 2021-12-26T21:54:47 Last Updated: 2024-08-05T12:26:39.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_context can cause a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0021.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
CVE ID: CVE-2018-25029 State: PUBLISHED Published: 2022-02-04T22:33:06.210079Z Last Updated: 2024-09-17T03:32:57.132Z Vendors: Silicon Labs Products: Z-Wave Problem Types: CWE-757 Description: The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a different vulnerability (CVE-2013-20003) to intercept and spoof traffic. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/z-shave-exploiting-z-wave-downgrade-attacks/ - https://community.silabs.com/s/share/a5U1M000000knqNUAQ/updated-your-zwave-smart-l
xploiting-z-wave-downgrade-attacks/ - https://community.silabs.com/s/share/a5U1M000000knqNUAQ/updated-your-zwave-smart-locks-are-safe-and-secure
CVE ID: CVE-2018-25030 State: PUBLISHED Published: 2022-03-28T18:00:35.000Z Last Updated: 2025-04-15T14:45:35.606Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mirmay Products: Secure Private Browser , File Manager Problem Types: CWE-287 Description: A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.106056 - https://youtu.be/cd6nbos-BI0 -
Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.106056 - https://youtu.be/cd6nbos-BI0 - https://www.scip.ch/en/?labs.20180201
CVE ID: CVE-2018-25031 State: PUBLISHED Published: 2022-03-11T06:47:46 Last Updated: 2024-08-05T12:26:39.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be resolved in 4.1.3. However, third parties have indicated this is not resolved in 4.1.3 and even occurs in that version and possibly others. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-SWAGG
alyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-SWAGGERUI-2314885 - https://github.com/swagger-api/swagger-ui/issues/4872 - https://github.com/swagger-api/swagger-ui/releases/tag/v4.1.3 - https://security.netapp.com/advisory/ntap-20220407-0004/
CVE ID: CVE-2018-25032 State: PUBLISHED Published: 2022-03-25T00:00:00.000Z Last Updated: 2025-05-06T14:19:53.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2022/03/24/1 - https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531 - http://www.openwall.com/lists/oss-security/2022/03/25/2 - http://www.openwall.com/lists/oss-security/2022/03/26/1 - https://www.debian.org/security/2022/dsa-5111 - https://l
/2 - http://www.openwall.com/lists/oss-security/2022/03/26/1 - https://www.debian.org/security/2022/dsa-5111 - https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html - http://seclists.org/fulldisclosure/2022/May/33 - htt
ttps://lists.debian.org/debian-lts-announce/2022/05/msg00008.html - http://seclists.org/fulldisclosure/2022/May/33 - http://seclists.org/fulldisclosure/2022/May/35 - http://seclists.org/fulldisclosure/2022/May/38 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/ - https://www.oracle.com/security-alerts/cpujul2022.html - https://www.openwall.com/lists/oss-security/2022/03/28/3 - https://www.openwall.com/lists/oss-security/2022/03/28/1 - https://github.com/madler/zlib/compare/v1.2.11...v1.2.12 - https://github.com/madler/zlib/issues/605 - https://support.apple.com/kb/HT213257 - https://support.apple.com/kb/HT213
- https://github.com/madler/zlib/issues/605 - https://support.apple.com/kb/HT213257 - https://support.apple.com/kb/HT213256 - https://support.apple.com/kb/HT213255 - https://security.netapp.com/advisory/ntap-20220526-0009/ - https://security.netapp.com/advisory/ntap-20220729-0004/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html - https://security.gentoo.org/glsa/202210-42 - https://cert-portal.siemens.com/prod
n-lts-announce/2022/09/msg00023.html - https://security.gentoo.org/glsa/202210-42 - https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
CVE ID: CVE-2018-25033 State: PUBLISHED Published: 2022-05-08T05:03:10 Last Updated: 2024-08-05T12:26:39.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/admesh/admesh/issues/28 - https://lists.debian.org/debian-lts-announce/2022/05/msg00029.html
CVE ID: CVE-2018-25034 State: PUBLISHED Published: 2022-06-12T07:40:19 Last Updated: 2024-08-05T12:26:39.613Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Thomson Products: TCW710 Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input ><script>alert(1)</script> as part of POST Request leads to basic cross site scripting (Persistent). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
ipting (Persistent). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-126695. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.126695 - https://vuldb.com/?ctiid.126695 - https://alquimistadesistemas.com/auditando-router-thomson-tcw710
CVE ID: CVE-2018-25035 State: PUBLISHED Published: 2022-06-12T07:40:21.000Z Last Updated: 2025-04-15T14:26:36.643Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Thomson Products: TCW710 Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additio
nt). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://alquimistadesistemas.com/auditando-router-thomson-tcw710 - https://vuldb.com/?id.126696
CVE ID: CVE-2018-25036 State: PUBLISHED Published: 2022-06-12T07:40:22.000Z Last Updated: 2025-04-15T14:26:29.134Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Thomson Products: TCW710 Problem Types: CWE-80 Description: A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be launched remotely. The exploit has been disclosed to the public and may
s site scripting (Persistent). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://alquimistadesistemas.com/auditando-router-thomson-tcw710 - https://vuldb.com/?id.126697
CVE ID: CVE-2018-25037 State: PUBLISHED Published: 2022-06-12T07:40:24.000Z Last Updated: 2025-04-15T14:26:19.959Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Thomson Products: TCW710 Problem Types: CWE-80 Description: A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes
attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://alquimistadesistemas.com/auditando-router-thomson-tcw710 - https://vuldb.com/?id.126698
CVE ID: CVE-2018-25038 State: PUBLISHED Published: 2022-06-12T07:40:25.000Z Last Updated: 2025-04-15T14:26:13.292Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Thomson Products: TCW710 Problem Types: CWE-80 Description: A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - C
nitiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://alquimistadesistemas.com/auditando-router-thomson-tcw710 - https://vuldb.com/?id.126699
CVE ID: CVE-2018-25039 State: PUBLISHED Published: 2022-06-12T07:40:27.000Z Last Updated: 2025-04-15T14:26:06.236Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Thomson Products: TCW710 Problem Types: CWE-80 Description: A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional