auren-research/cyber-sec huggingface dataset:
cveID: CVE-2022-41128
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
dateAdded: 2022-11-08
shortDescription: Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-12-09
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128; https://nvd.nist.gov/vuln/detail/CVE-2022-41128
cwes: CWE-787
cveID: CVE-2021-25337
vendorProject: Samsung
product: Mobile Devices
vulnerabilityName: Samsung Mobile Devices Improper Access Control Vulnerability
dateAdded: 2022-11-08
shortDescription: Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-29
knownRansomwareCampaignUse: Unknown
notes: https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25337
cwes: CWE-269
cveID: CVE-2021-25369
vendorProject: Samsung
product: Mobile Devices
vulnerabilityName: Samsung Mobile Devices Improper Access Control Vulnerability
dateAdded: 2022-11-08
shortDescription: Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-29
knownRansomwareCampaignUse: Unknown
notes: https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25369
cwes: CWE-200
cveID: CVE-2021-25370
vendorProject: Samsung
product: Mobile Devices
vulnerabilityName: Samsung Mobile Devices Memory Corruption Vulnerability
dateAdded: 2022-11-08
shortDescription: Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-29
knownRansomwareCampaignUse: Unknown
notes: https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370
cwes: CWE-416
cveID: CVE-2022-3723
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2022-10-28
shortDescription: Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-18
knownRansomwareCampaignUse: Unknown
notes: https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html; https://nvd.nist.gov/vuln/detail/CVE-2022-3723
cwes: CWE-122
CWE-843
cveID: CVE-2022-42827
vendorProject: Apple
product: iOS and iPadOS
vulnerabilityName: Apple iOS and iPadOS Out-of-Bounds Write Vulnerability
dateAdded: 2022-10-25
shortDescription: Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-15
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT213489; https://nvd.nist.gov/vuln/detail/CVE-2022-42827
cwes: CWE-20
CWE-787
cveID: CVE-2020-3433
vendorProject: Cisco
product: AnyConnect Secure
vulnerabilityName: Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
dateAdded: 2022-10-24
shortDescription: Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-14
knownRansomwareCampaignUse: Known
notes: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-F26WwJW; https://nvd.nist.gov/vuln/detail/CVE-2020-3433
cwes: CWE-427
cveID: CVE-2020-3153
vendorProject: Cisco
product: AnyConnect Secure
vulnerabilityName: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
dateAdded: 2022-10-24
shortDescription: Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-14
knownRansomwareCampaignUse: Known
notes: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj; https://nvd.nist.gov/vuln/detail/CVE-2020-3153
cwes: CWE-427
cveID: CVE-2018-19323
vendorProject: GIGABYTE
product: Multiple Products
vulnerabilityName: GIGABYTE Multiple Products Privilege Escalation Vulnerability
dateAdded: 2022-10-24
shortDescription: The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-14
knownRansomwareCampaignUse: Known
notes: https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19323
cveID: CVE-2018-19322
vendorProject: GIGABYTE
product: Multiple Products
vulnerabilityName: GIGABYTE Multiple Products Code Execution Vulnerability
dateAdded: 2022-10-24
shortDescription: The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-14
knownRansomwareCampaignUse: Known
notes: https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19322
cwes: CWE-749
cveID: CVE-2018-19321
vendorProject: GIGABYTE
product: Multiple Products
vulnerabilityName: GIGABYTE Multiple Products Privilege Escalation Vulnerability
dateAdded: 2022-10-24
shortDescription: The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-14
knownRansomwareCampaignUse: Known
notes: https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19321
cveID: CVE-2018-19320
vendorProject: GIGABYTE
product: Multiple Products
vulnerabilityName: GIGABYTE Multiple Products Unspecified Vulnerability
dateAdded: 2022-10-24
shortDescription: The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-14
knownRansomwareCampaignUse: Known
notes: https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19320
cveID: CVE-2022-41352
vendorProject: Synacor
product: Zimbra Collaboration Suite (ZCS)
vulnerabilityName: Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
dateAdded: 2022-10-20
shortDescription: Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-10
knownRansomwareCampaignUse: Unknown
notes: https://wiki.zimbra.com/wiki/Security_Center; https://nvd.nist.gov/vuln/detail/CVE-2022-41352
cwes: CWE-22
cveID: CVE-2021-3493
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Privilege Escalation Vulnerability
dateAdded: 2022-10-20
shortDescription: The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-10
knownRansomwareCampaignUse: Unknown
notes: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52; https://nvd.nist.gov/vuln/detail/CVE-2021-3493
cwes: CWE-862
cveID: CVE-2022-40684
vendorProject: Fortinet
product: Multiple Products
vulnerabilityName: Fortinet Multiple Products Authentication Bypass Vulnerability
dateAdded: 2022-10-11
shortDescription: Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-01
knownRansomwareCampaignUse: Known
notes: https://www.fortiguard.com/psirt/FG-IR-22-377; https://nvd.nist.gov/vuln/detail/CVE-2022-40684
cwes: CWE-288
cveID: CVE-2022-41033
vendorProject: Microsoft
product: Windows COM+ Event System Service
vulnerabilityName: Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
dateAdded: 2022-10-11
shortDescription: Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-11-01
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41033; https://nvd.nist.gov/vuln/detail/CVE-2022-41033
cwes: CWE-843
cveID: CVE-2022-41082
vendorProject: Microsoft
product: Exchange Server
vulnerabilityName: Microsoft Exchange Server Remote Code Execution Vulnerability
dateAdded: 2022-09-30
shortDescription: Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-21
knownRansomwareCampaignUse: Known
notes: https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/; https://nvd.nist.gov/vuln/detail/CVE-2022-41082
cwes: CWE-502
cveID: CVE-2022-41040
vendorProject: Microsoft
product: Exchange Server
vulnerabilityName: Microsoft Exchange Server Server-Side Request Forgery Vulnerability
dateAdded: 2022-09-30
shortDescription: Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-21
knownRansomwareCampaignUse: Known
notes: https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/; https://nvd.nist.gov/vuln/detail/CVE-2022-41040
cwes: CWE-918
cveID: CVE-2022-36804
vendorProject: Atlassian
product: Bitbucket Server and Data Center
vulnerabilityName: Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
dateAdded: 2022-09-30
shortDescription: Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-21
knownRansomwareCampaignUse: Unknown
notes: https://jira.atlassian.com/browse/BSERV-13438; https://nvd.nist.gov/vuln/detail/CVE-2022-36804
cwes: CWE-78
CWE-88
CWE-158
cveID: CVE-2022-3236
vendorProject: Sophos
product: Firewall
vulnerabilityName: Sophos Firewall Code Injection Vulnerability
dateAdded: 2022-09-23
shortDescription: A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-14
knownRansomwareCampaignUse: Unknown
notes: https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce; https://nvd.nist.gov/vuln/detail/CVE-2022-3236
cwes: CWE-94
cveID: CVE-2022-35405
vendorProject: Zoho
product: ManageEngine
vulnerabilityName: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
dateAdded: 2022-09-22
shortDescription: Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-13
knownRansomwareCampaignUse: Unknown
notes: https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html; https://nvd.nist.gov/vuln/detail/CVE-2022-35405
cwes: CWE-502
cveID: CVE-2022-40139
vendorProject: Trend Micro
product: Apex One and Apex One as a Service
vulnerabilityName: Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
dateAdded: 2022-09-15
shortDescription: Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-06
knownRansomwareCampaignUse: Unknown
notes: https://success.trendmicro.com/dcx/s/solution/000291528?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2022-40139
cwes: CWE-353
CWE-641
cveID: CVE-2013-6282
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Improper Input Validation Vulnerability
dateAdded: 2022-09-15
shortDescription: The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-06
knownRansomwareCampaignUse: Unknown
notes: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8404663f81d212918ff85f493649a7991209fa04; https://nvd.nist.gov/vuln/detail/CVE-2013-6282
cwes: CWE-20
cveID: CVE-2013-2597
vendorProject: Code Aurora
product: ACDB Audio Driver
vulnerabilityName: Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
dateAdded: 2022-09-15
shortDescription: The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-06
knownRansomwareCampaignUse: Unknown
notes: https://web.archive.org/web/20161226013354/https:/www.codeaurora.org/news/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597; https://nvd.nist.gov/vuln/detail/CVE-2013-2597
cwes: CWE-119
cveID: CVE-2013-2596
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Integer Overflow Vulnerability
dateAdded: 2022-09-15
shortDescription: Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-06
knownRansomwareCampaignUse: Unknown
notes: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fc9bbca8f650e5f738af8806317c0a041a48ae4a; https://nvd.nist.gov/vuln/detail/CVE-2013-2596
cwes: CWE-189
cveID: CVE-2013-2094
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Privilege Escalation Vulnerability
dateAdded: 2022-09-15
shortDescription: Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-06
knownRansomwareCampaignUse: Unknown
notes: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8176cced706b5e5d15887584150764894e94e02f; https://nvd.nist.gov/vuln/detail/CVE-2013-2094
cwes: CWE-189
cveID: CVE-2010-2568
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Remote Code Execution Vulnerability
dateAdded: 2022-09-15
shortDescription: Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-06
knownRansomwareCampaignUse: Unknown
notes: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046; https://nvd.nist.gov/vuln/detail/CVE-2010-2568
cwes: CWE-20
cveID: CVE-2022-37969
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
dateAdded: 2022-09-14
shortDescription: Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-05
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37969; https://nvd.nist.gov/vuln/detail/CVE-2022-37969
cwes: CWE-20
CWE-787
cveID: CVE-2022-32917
vendorProject: Apple
product: iOS, iPadOS, and macOS
vulnerabilityName: Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
dateAdded: 2022-09-14
shortDescription: Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-10-05
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT213445, https://support.apple.com/en-us/HT213444; https://nvd.nist.gov/vuln/detail/CVE-2022-32917
cwes: CWE-20
CWE-787
cveID: CVE-2022-3075
vendorProject: Google
product: Chromium Mojo
vulnerabilityName: Google Chromium Mojo Insufficient Data Validation Vulnerability
dateAdded: 2022-09-08
shortDescription: Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-29
knownRansomwareCampaignUse: Unknown
notes: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html, https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3075; https://nvd.nist.gov/vuln/detail/CVE-2022-3075
cwes: CWE-20
cveID: CVE-2022-27593
vendorProject: QNAP
product: Photo Station
vulnerabilityName: QNAP Photo Station Externally Controlled Reference Vulnerability
dateAdded: 2022-09-08
shortDescription: Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-29
knownRansomwareCampaignUse: Known
notes: https://www.qnap.com/en/security-advisory/qsa-22-24; https://nvd.nist.gov/vuln/detail/CVE-2022-27593
cwes: CWE-610
cveID: CVE-2022-26258
vendorProject: D-Link
product: DIR-820L
vulnerabilityName: D-Link DIR-820L Remote Code Execution Vulnerability
dateAdded: 2022-09-08
shortDescription: D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-09-29
knownRansomwareCampaignUse: Unknown
notes: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10295; https://nvd.nist.gov/vuln/detail/CVE-2022-26258
cwes: CWE-78
cveID: CVE-2020-9934
vendorProject: Apple
product: iOS, iPadOS, and macOS
vulnerabilityName: Apple iOS, iPadOS, and macOS Input Validation Vulnerability
dateAdded: 2022-09-08
shortDescription: Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-29
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT211288, https://support.apple.com/en-us/HT211289; https://nvd.nist.gov/vuln/detail/CVE-2020-9934
cveID: CVE-2018-7445
vendorProject: MikroTik
product: RouterOS
vulnerabilityName: MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
dateAdded: 2022-09-08
shortDescription: In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-29
knownRansomwareCampaignUse: Unknown
notes: https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_update, https://mikrotik.com/download; https://nvd.nist.gov/vuln/detail/CVE-2018-7445
cwes: CWE-119
cveID: CVE-2018-6530
vendorProject: D-Link
product: Multiple Routers
vulnerabilityName: D-Link Multiple Routers OS Command Injection Vulnerability
dateAdded: 2022-09-08
shortDescription: Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.
requiredAction: The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.
dueDate: 2022-09-29
knownRansomwareCampaignUse: Known
notes: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10105; https://nvd.nist.gov/vuln/detail/CVE-2018-6530
cwes: CWE-78
cveID: CVE-2018-2628
vendorProject: Oracle
product: WebLogic Server
vulnerabilityName: Oracle WebLogic Server Unspecified Vulnerability
dateAdded: 2022-09-08
shortDescription: Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-29
knownRansomwareCampaignUse: Unknown
notes: https://www.oracle.com/security-alerts/cpuapr2018.html; https://nvd.nist.gov/vuln/detail/CVE-2018-2628
cwes: CWE-502