rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-14819 
Fuji Electric V-Server 4.0.3.0 and prior, An out-of-bounds read vulnerability has been identified, which may allow remote code execution.
Problem types: cwe_id: CWE-125
description: OUT-OF-BOUNDS READ CWE-125
Affected products: vendor: Fuji Electric
product: V-Server
Published: 2018-09-26T20:00:00.000Z
CVE-2018-14820 
Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing.
Problem types: cwe_id: CWE-73
description: EXTERNAL CONTROL OF FILE NAME OR PATH CWE-73
Affected products: vendor: Advantech
product: Advantech WebAccess
Published: 2018-10-23T20:00:00.000Z
CVE-2018-14821 
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software to regain functionality.
Problem types: cwe_id: CWE-122
description: HEAP-BASED BUFFER OVERFLOW CWE-122
Affected products: vendor: Rockwell Automation
product: RSLinx Classic
Published: 2018-09-20T20:00:00.000Z
CVE-2018-14822 
Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user and execute arbitrary code.
Problem types: cwe_id: CWE-598
description: INFORMATION EXPOSURE THROUGH QUERY STRINGS IN GET REQUEST CWE-598
Affected products: vendor: Entes
product: EMG12
Published: 2018-10-02T21:00:00.000Z
CVE-2018-14823 
Fuji Electric V-Server 4.0.3.0 and prior, A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: Fuji Electric
product: V-Server
Published: 2018-09-26T20:00:00.000Z
CVE-2018-14824 
Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information.
Problem types: cwe_id: CWE-125
description: OUT-OF-BOUNDS READ CWE-125
Affected products: vendor: Delta Electronics
product: Delta Industrial Automation PMSoft
Published: 2018-09-27T21:00:00.000Z
CVE-2018-14825 
On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN75 running Android OS 6.0, CN75e running Android OS 6.0, CT50 running Android OS 6.0, D75e running Android OS 6.0, CT50 running Android OS 4.4, D75e running Android OS 4.4, CN51 running Android OS 6.0, EDA50k running Android 4.4, EDA50 running Android OS 7.1, EDA50k running Android OS 7.1, EDA70 running Android OS 7.1, EDA60k running Android OS 7.1, and EDA51 running Android OS 8.1), a skilled attacker with advanced knowledge of the target system could exploit this vulnerability by creating an application that would successfully bind to the service and gain elevated system privileges. This could enable the attacker to obtain access to keystrokes, passwords, personal identifiable information, photos, emails, or business-critical documents.
Problem types: cwe_id: CWE-269
description: IMPROPER PRIVILEGE MANAGEMENT CWE-269
Affected products: vendor: Honeywell
product: Mobile Computers
Published: 2018-09-24T20:00:00.000Z
CVE-2018-14826 
Entes EMG12 versions 2.57 and prior The application uses a web interface where it is possible for an attacker to bypass authentication with a specially crafted URL. This could allow for remote code execution.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: Entes
product: EMG12
Published: 2018-10-02T21:00:00.000Z
CVE-2018-14827 
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionality.
Problem types: cwe_id: CWE-400
description: UNCONTROLLED RESOURCE CONSUMPTION ('RESOURCE EXHAUSTION') CWE-400
Affected products: vendor: Rockwell Automation
product: RSLinx Classic
Published: 2018-09-20T20:00:00.000Z
CVE-2018-14828 
Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions at a system administrator level.
Problem types: cwe_id: CWE-269
description: IMPROPER PRIVILEGE MANAGEMENT CWE-269
Affected products: vendor: Advantech
product: Advantech WebAccess
Published: 2018-10-23T20:00:00.000Z
CVE-2018-14829 
Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally send a malformed CIP packet to Port 44818, causing the software application to stop responding and crash. This vulnerability also has the potential to exploit a buffer overflow condition, which may allow the threat actor to remotely execute arbitrary code.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: Rockwell Automation
product: RSLinx Classic
Published: 2018-09-20T20:00:00.000Z
CVE-2018-14831 
An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T14:29:53.000Z
CVE-2018-14833 
Intuit Lacerte 2017 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-09T12:21:51.000Z
CVE-2018-14835 
Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-02T00:00:00.000Z
CVE-2018-14836 
Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-02T00:00:00.000Z
CVE-2018-14837 
Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-10T16:00:00.000Z
CVE-2018-14838 
rejucms 2.1 has stored XSS via the admin/book.php content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-02T01:00:00.000Z
CVE-2018-14839 
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T20:01:16.000Z
CVE-2018-14840 
uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-02T01:00:00.000Z
CVE-2018-14846 
The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-20T22:00:00.000Z
CVE-2018-14847 
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-02T07:00:00.000Z
CVE-2018-14849 
Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T17:00:00.000Z
CVE-2018-14850 
Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T17:00:00.000Z
CVE-2018-14851 
exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-02T19:00:00.000Z
CVE-2018-14852 
Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause invalid accesses to operating system memory due to improper validation of the network interface index provided by the Wi-Fi chip's firmware.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T18:00:00.000Z
CVE-2018-14853 
A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device to reboot. The Samsung ID is SVE-2018-11783.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T18:00:00.000Z
CVE-2018-14854 
Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T18:00:00.000Z
CVE-2018-14855 
Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T18:00:00.000Z
CVE-2018-14856 
Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code execution on the Wi-Fi) chip to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T18:00:00.000Z
CVE-2018-14857 
Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a template file containing PHP code, because file extensions other than .html are permitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-06T21:00:00.000Z
CVE-2018-14858 
An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private and reserved IP addresses such as 10.0.0.0/8. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14514.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-02T20:00:00.000Z
CVE-2018-14859 
Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated users to reset the password of other users by being the first party to use the secure token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:02:51.000Z
CVE-2018-14860 
Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:01:53.000Z
CVE-2018-14861 
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T19:00:04.000Z
CVE-2018-14862 
Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:56:25.000Z
CVE-2018-14863 
Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:53:59.000Z
CVE-2018-14864 
Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated users to inject arbitrary web script via a crafted attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:51:29.000Z
CVE-2018-14865 
Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkhtmltopdf, which allows remote attackers to read local files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:40:31.000Z
CVE-2018-14866 
Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T17:42:07.000Z
CVE-2018-14867 
Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T17:37:45.000Z
CVE-2018-14868 
Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T17:36:34.000Z
CVE-2018-14869 
PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-06T21:00:00.000Z
CVE-2018-14872 
An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, with all data reset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T00:00:00.000Z
CVE-2018-14873 
An issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability involving a p=account request to index.php and another file named commonPages.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T00:00:00.000Z
CVE-2018-14874 
An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input passed through the code parameter in three pages as collaterals/colexe3t.jsp and /references/refsuppu.jsp and /references/refbranu.jsp is mishandled before being used in SQL queries, allowing SQL injection with an authenticated session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-30T18:54:22.000Z
CVE-2018-14875 
An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-30T18:52:25.000Z
CVE-2018-14876 
An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T00:00:00.000Z
CVE-2018-14877 
An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T00:00:00.000Z
CVE-2018-14878 
JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific file, because of Deserialization of Untrusted Data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-13T17:00:00.000Z
CVE-2018-14879 
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:33:33.000Z
CVE-2018-14880 
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:35:06.000Z
CVE-2018-14881 
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:36:44.000Z
CVE-2018-14882 
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T15:41:37.000Z
CVE-2018-14883 
An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T13:00:00.000Z
CVE-2018-14884 
An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because http_header_value in ext/standard/http_fopen_wrapper.c can be a NULL value that is mishandled in an atoi call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T13:00:00.000Z
CVE-2018-14885 
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T17:35:21.000Z
CVE-2018-14886 
The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file inclusion, which allows privileged authenticated users to read local files via a crafted module description.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T17:27:55.000Z
CVE-2018-14887 
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-28T17:26:42.000Z
CVE-2018-14888 
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-14T16:00:00.000Z
CVE-2018-14889 
CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T21:00:00.000Z
CVE-2018-14890 
Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T21:00:00.000Z
CVE-2018-14891 
Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T21:00:00.000Z
CVE-2018-14892 
Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T21:00:00.000Z
CVE-2018-14893 
A system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows attackers to execute system commands via the web application API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-27T21:00:00.000Z
CVE-2018-14894 
CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-09T17:27:16.000Z
CVE-2018-14899 
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-30T17:00:00.000Z
CVE-2018-14900 
On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-30T17:00:00.000Z
CVE-2018-14901 
The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the Dropbox, Box, Evernote and OneDrive services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-30T17:00:00.000Z