Design/Logic Flaw

EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies...

CVE-2018-20512

The CVE-2018-20512 entry concerns EPON CPE-WiFi devices 2.0.4-X000. Affected component: cookies-based session handling that enables privilege escalation via cookies cooLogin=1, cooUser=admin, and timestamp=-1. Documented impact is high/critical access (C/H I/H A/H) per CVSS, with network access a...

CVE-2018-20512

EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies...

CVE-2018-20512: Reliance on Cookies without Validation and Integrity Checking

EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies...

PT-2019-10100

Name of the Vulnerable Software and Affected Versions: EPON CPE-WiFi devices version 2.0.4-X000 Description: The issue allows for escalation of privileges. This can be achieved by sending specific cookies, including cooLogin=1, cooUser=admin, and timestamp=-1. Recommendations: For EPON CPE-WiFi...

Fedora 28 : 1:openssl (2018-49651b2236)

Minor update to version 1.1.0h. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 28 : dokuwiki (2018-be9f4838dd)

Update to upstream version 2018-04-22a Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

CVE-2019-3574

In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...

openSUSE Security Update : git (openSUSE-2018-1599)

This update for git fixes the following issues : Security issue fixed : - CVE-2018-19486: Fixed git that executed commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was bsc1117257. This upda...

openSUSE Security Update : salt (openSUSE-2018-1574)

This update for salt fixes the following issues : - Crontab module fix: file attributes option missing boo1114824 - Fix gitpillar merging across multiple env repositories boo1112874 - Bugfix: unable to detect os arch when RPM is not installed boo1114197 - Fix LDAP authentication issue when a vali...

SuiteCRM Detection (HTTP)

HTTP based detection of SuiteCRM. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.141791";...

SolarWinds Active Diagnostics Detection (Windows SMB Login)

This script detects the installed version of SolarWinds Active Diagnostics for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SolarWinds Recommendations Detection (Windows SMB Login)

This script detects the installed version of SolarWinds Recommendations for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SolarWinds MIBs Detection (Windows SMB Login)

This script detects the installed version of SolarWinds MIBs for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SolarWinds Web Toolset Detection (Windows SMB Login)

This script detects the installed version of SolarWinds Web Toolset for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SolarWinds Information Service Detection (Windows SMB Login)

This script detects the installed version of SolarWinds Information Service for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SolarWinds Orion Core Services Detection (Windows SMB Login)

This script detects the installed version of SolarWinds Orion Core Services for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SolarWinds Web Performance Monitor (WPM) Detection (Windows SMB Login)

SMB login-based detection of SolarWinds Web Performance Monitor WPM. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SolarWinds Virtualization Manager Detection (Windows SMB Login)

SMB login-based detection of SolarWinds Virtualization Manager for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zoom Client / Desktop / Workplace Detection (Windows SMB Login)

SMB login-based detection of the Zoom Client / Desktop / Workplace. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"...