rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-20321 
An issue was discovered in Rancher 2 through 2.1.5. Any project member with access to the default namespace can mount the netes-default service account in a pod, and then use that pod to execute administrative privileged commands against the k8s cluster. This could be mitigated by isolating the default namespace in a separate project, where only cluster admins can be given permissions to access. As of 2018-12-20, this bug affected ALL clusters created or imported by Rancher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-10T13:59:44.000Z
CVE-2018-20322 
LimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource zip upload, resulting in Javascript code execution against LimeSurvey administrators. Fixed in version 3.15.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T22:00:00.000Z
CVE-2018-20323 
www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:38:18.000Z
CVE-2018-20325 
There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T22:00:00.000Z
CVE-2018-20326 
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage=html/index.html var:subpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-02T18:00:00.000Z
CVE-2018-20327 
Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T06:00:00.000Z
CVE-2018-20328 
Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T06:00:00.000Z
CVE-2018-20329 
Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be made public) to extract and/or modify database information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T06:00:00.000Z
CVE-2018-20330 
The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T09:00:00.000Z
CVE-2018-20331 
Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the ssdt.sys kernel driver. The bug is caused by failure to properly validate the length of the user-supplied data. An attacker can leverage this vulnerability to execute arbitrary code in the context of the kernel, which could lead to privilege escalation. A failed exploit could lead to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T02:00:00.000Z
CVE-2018-20332 
An issue has been discovered in the OpenWebif plugin through 1.2.4 for Enigma2 based devices. Reading of arbitrary files is possible with /file?action=download&file= followed by a full pathname, and listing of arbitrary directories is possible with /file?action=download&dir= followed by a full pathname. This is related to plugin/controllers/file.py in the e2openplugin-OpenWebif project.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T09:00:00.000Z
CVE-2018-20333 
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T00:11:15.000Z
CVE-2018-20334 
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T00:11:06.000Z
CVE-2018-20335 
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T00:11:09.000Z
CVE-2018-20336 
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buffer overflow issue in parse_req_queries function in wanduck.c via a long string over UDP, which may lead to an information leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T15:51:33.000Z
CVE-2018-20337 
There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T09:00:00.000Z
CVE-2018-20338 
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T09:00:00.000Z
CVE-2018-20339 
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T09:00:00.000Z
CVE-2018-20340 
Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T20:06:42.000Z
CVE-2018-20341 
WINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability, which could allow an attacker to execute arbitrary code on a target system. If the executable is enclosed in quote tags "" then the system will know where to find it. However if the path of where the application binary is located doesn't contain any quotes then Windows will try to find it and execute it inside every folder of this path until they reach the executable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-08T14:50:01.000Z
CVE-2018-20342 
The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T18:00:00.000Z
CVE-2018-20343 
Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build Engine 1. An attacker could craft a special map file to execute arbitrary code when the map file is loaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T20:48:12.000Z
CVE-2018-20345 
Incorrect access control in StackStorm API (st2api) in StackStorm before 2.9.2 and 2.10.x before 2.10.1 allows an attacker (who has a StackStorm account and is authenticated against the StackStorm API) to retrieve datastore items for other users by utilizing the /v1/keys "?scope=all" and "?user=<username>" query filter parameters. Enterprise editions with RBAC enabled are not affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T19:00:00.000Z
CVE-2018-20346 
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-21T21:00:00.000Z
CVE-2018-20348 
libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T00:00:00.000Z
CVE-2018-20349 
The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) via a crafted object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T00:00:00.000Z
CVE-2018-20351 
The Markdown component in Evernote (Chinese) before 8.3.2 on macOS allows stored XSS, aka MAC-832.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T00:00:00.000Z
CVE-2018-20352 
Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T16:15:42.000Z
CVE-2018-20353 
An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T16:19:11.000Z
CVE-2018-20354 
An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T16:21:41.000Z
CVE-2018-20355 
An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T16:23:43.000Z
CVE-2018-20356 
An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T16:26:32.000Z
CVE-2018-20357 
A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T15:00:00.000Z
CVE-2018-20358 
An invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T15:00:00.000Z
CVE-2018-20359 
An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T15:00:00.000Z
CVE-2018-20360 
An invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T15:00:00.000Z
CVE-2018-20361 
An invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T15:00:00.000Z
CVE-2018-20362 
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHT_SHORT_SEQUENCE case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T15:00:00.000Z
CVE-2018-20363 
LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T17:00:00.000Z
CVE-2018-20364 
LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T17:00:00.000Z
CVE-2018-20365 
LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T17:00:00.000Z
CVE-2018-20367 
The "mall some commodity details: commodity consultation" component in WSTMart 2.0.8_181212 has stored XSS via the consultContent parameter, as demonstrated by the index.php/home/goodsconsult/add.html URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-22T19:00:00.000Z
CVE-2018-20368 
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T02:00:00.000Z
CVE-2018-20369 
Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi module. The injection point of the issue is the Add_Update module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T02:00:00.000Z
CVE-2018-20370 
SZ NetChat before 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T02:00:00.000Z
CVE-2018-20371 
PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by "GET /login.html__passwd1" and "GET /login.html__passwd2" and so on.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T02:00:00.000Z
CVE-2018-20372 
TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T02:00:00.000Z
CVE-2018-20373 
Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T02:00:00.000Z
CVE-2018-20374 
An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the use_section1 function in tccasm.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T18:00:00.000Z
CVE-2018-20375 
An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the sym_pop function in tccgen.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T18:00:00.000Z
CVE-2018-20376 
An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asm_parse_directive function in tccasm.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T18:00:00.000Z
CVE-2018-20377 
Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T18:00:00.000Z
CVE-2018-20378 
The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK 3.2 through 6.0 allow remote, unauthenticated attackers to execute arbitrary code or cause a denial of service via malicious L2CAP configuration requests, in conjunction with crafted SDP communication over maliciously configured L2CAP channels. The attacker must have connectivity over the Bluetooth physical layer, and must be able to send raw L2CAP frames. This is related to L2Cap_HandleConfigReq in core/stack/l2cap/l2cap_sm.c and SdpServHandleServiceSearchAttribReq in core/stack/sdp/sdpserv.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-29T14:20:16.000Z
CVE-2018-20379 
Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20380 
Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20381 
Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20382 
Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20383 
ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20384 
iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20385 
CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20386 
ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20387 
Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20388 
Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20389 
D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20390 
Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20391 
TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z
CVE-2018-20392 
S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-23T21:00:00.000Z