VYPR

CVEs

37,956 total · page 644 of 760

AllCriticalHighKEV
  • CVE-2018-5203CriDec 28, 2018
    DEXTUploadX5
    DEXTUploadX5
    risk 0.64cvss 9.8epss 0.02

    DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution.

  • CVE-2018-20572CriDec 28, 2018
    WuzhiCMS
    Wuzhicms
    risk 0.64cvss 9.8epss 0.02

    WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893.

  • CVE-2018-20569CriDec 28, 2018
    Generic Content Management System Project
    Generic Content Management System
    risk 0.64cvss 9.8epss 0.02

    user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.

  • CVE-2018-20568CriDec 28, 2018
    Generic Content Management System Project
    Generic Content Management System
    risk 0.64cvss 9.8epss 0.02

    Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.

  • CVE-2018-1000631CriDec 28, 2018
    Azure Access Technology
    V2i Hub
    risk 0.64cvss 9.8epss 0.02

    Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::user_info() function, which could allow the attacker to view, add, modify or delete information in the…

  • CVE-2018-1000628CriDec 28, 2018
    Azure Access Technology
    V2i Hub
    risk 0.64cvss 9.8epss 0.03

    Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp() function. By adding "[]" to the end of "key" in the URL when…

  • CVE-2018-1000627CriDec 28, 2018
    Azure Access Technology
    V2i Hub
    risk 0.64cvss 9.8epss 0.02

    Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file. An attacker could exploit this vulnerability to obtain the current API key to gain unauthorized access to the system.

  • CVE-2018-1000626CriDec 28, 2018
    Azure Access Technology
    V2i Hub
    risk 0.64cvss 9.8epss 0.03

    Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attacker could exploit this vulnerability using all available API functions containing an unchanged API key to gain…

  • CVE-2018-1000625CriDec 28, 2018
    Azure Access Technology
    V2i Hub
    risk 0.64cvss 9.8epss 0.02

    Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An attacker could exploit this vulnerability to log in as an admin on any installation and gain unauthorized access to the system.

  • CVE-2018-20508CriDec 27, 2018
    CrashFix
    CrashFix
    risk 0.64cvss 9.8epss 0.01

    CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search() function.

  • CVE-2018-19873CriDec 26, 2018
    Qt
    Qt
    risk 0.64cvss 9.8epss 0.03

    An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.

  • CVE-2018-11742CriDec 26, 2018
    NEC
    Univerge Sv9100 WebPro
    risk 0.68cvss 9.8epss 0.14

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

  • CVE-2018-11741CriDec 26, 2018
    NEC
    Univerge Sv9100 WebPro
    risk 0.68cvss 9.8epss 0.18

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs.

  • CVE-2018-20480CriDec 26, 2018
    S CMS
    S CMS
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php P_id parameter.

  • CVE-2018-20479CriDec 26, 2018
    S CMS
    S CMS
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wap_index.php?type=newsinfo S_id parameter.

  • CVE-2018-20477CriDec 26, 2018
    S CMS
    S CMS
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered in S-CMS 3.0. It allows SQL Injection via the bank/callback1.php P_no field.

  • CVE-2018-20445CriDec 25, 2018
    Dlink
    DCM-604
    risk 0.64cvss 9.8epss 0.02

    D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32 and iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32 SNMP requests.

  • CVE-2018-20444CriDec 25, 2018
    Technicolor
    CGA0111
    risk 0.64cvss 9.8epss 0.01

    Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.

  • CVE-2018-20443CriDec 25, 2018
    Technicolor
    Tc7200
    risk 0.64cvss 9.8epss 0.01

    Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.

  • CVE-2018-20442CriDec 25, 2018
    Technicolor
    Tc7110.b Firmware
    risk 0.64cvss 9.8epss 0.01

    Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.

  • CVE-2018-20441CriDec 25, 2018
    Technicolor
    Tc7200
    risk 0.64cvss 9.8epss 0.01

    Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.

  • CVE-2018-20440CriDec 25, 2018
    Technicolor
    CWA0101
    risk 0.64cvss 9.8epss 0.01

    Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.

  • CVE-2018-20439CriDec 25, 2018
    Technicolor
    DPC3928SL
    risk 0.64cvss 9.8epss 0.01

    Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.

  • CVE-2018-20438CriDec 25, 2018
    Technicolor
    TC7110.AR
    risk 0.64cvss 9.8epss 0.01

    Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.

  • CVE-2018-20248CriDec 24, 2018
    Foxitsoftware
    Quick PDF Library
    risk 0.64cvss 9.8epss 0.02

    In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref table pointers or invalid xref table data using the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile or DAOpenFileReadOnly functions may…

  • CVE-2018-19248CriDec 24, 2018
    Epson
    WorkForce WF-2861
    risk 0.59cvss 9.1epss 0.01

    The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to upload a firmware file and reset the printer without authentication by making a request to the /DOWN/FIRMWAREUPDATE/ROM1 URI…

  • CVE-2018-18698CriDec 24, 2018
    Xiaomi
    Mi A1
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot.

  • CVE-2018-7836CriDec 24, 2018
    IIoT Monitor
    IIoT Monitor
    risk 0.66cvss 9.8epss 0.32

    An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files.

  • CVE-2018-7800CriDec 24, 2018
    EVLink Parking
    EVLink Parking
    risk 0.64cvss 9.8epss 0.04

    A Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which could enable an attacker to gain access to the device.

  • CVE-2018-20433CriDec 24, 2018
    Mchange
    C3p0
    risk 0.57cvss 9.8epss 0.05

    c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.

  • CVE-2018-20401CriDec 23, 2018
    Zoomtel
    5352 Firmware
    risk 0.64cvss 9.8epss 0.02

    Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20400CriDec 23, 2018
    Ubee
    DVW2108
    risk 0.64cvss 9.8epss 0.02

    Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20399CriDec 23, 2018
    Motorola
    SBG901
    risk 0.64cvss 9.8epss 0.03

    Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20398CriDec 23, 2018
    Skyworth
    CM5100-511
    risk 0.64cvss 9.8epss 0.02

    Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20397CriDec 23, 2018
    Mplus
    CBC383Z
    risk 0.64cvss 9.8epss 0.02

    mplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20396CriDec 23, 2018
    NET&SYS
    MNG2120J
    risk 0.64cvss 9.8epss 0.01

    NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20395CriDec 23, 2018
    NETWAVE
    MNG6200
    risk 0.64cvss 9.8epss 0.02

    NETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20394CriDec 23, 2018
    Thomson
    DWG849
    risk 0.64cvss 9.8epss 0.02

    Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20393CriDec 23, 2018
    Technicolor
    Tc7200
    risk 0.64cvss 9.8epss 0.02

    Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT,…

  • CVE-2018-20392CriDec 23, 2018
    S A
    WebSTAR DPC2100
    risk 0.64cvss 9.8epss 0.02

    S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20391CriDec 23, 2018
    TEKNOTEL
    CBW700N
    risk 0.64cvss 9.8epss 0.02

    TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20390CriDec 23, 2018
    KAON
    CG2001-AN22A
    risk 0.64cvss 9.8epss 0.02

    Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20389CriDec 23, 2018
    Dlink
    DCM-604
    risk 0.64cvss 9.8epss 0.02

    D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20388CriDec 23, 2018
    Comtrend
    CM-6200un
    risk 0.64cvss 9.8epss 0.02

    Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20387CriDec 23, 2018
    Bnmux
    BCW700J
    risk 0.64cvss 9.8epss 0.02

    Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20386CriDec 23, 2018
    Arris
    SBG6580
    risk 0.64cvss 9.8epss 0.02

    ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20385CriDec 23, 2018
    Castlenet
    CBV38Z4EC
    risk 0.64cvss 9.8epss 0.02

    CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0…

  • CVE-2018-20384CriDec 23, 2018
    iNovo Broadband
    IB-8120-W21
    risk 0.64cvss 9.8epss 0.02

    iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20383CriDec 23, 2018
    Arris
    DG950A
    risk 0.64cvss 9.8epss 0.02

    ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20382CriDec 23, 2018
    Jiuzhou
    BCM93383WRG
    risk 0.64cvss 9.8epss 0.02

    Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.