CVE-2018-14918

LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...

CVE-2019-14918

XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etcro/web/internet/dhcpcliinfo.asp...

VulnCheck KEV: CVE-2018-14918

LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...

CVE-2019-14918

XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etcro/web/internet/dhcpcliinfo.asp...

CVE-2019-14918

CVE-2019-14918 affects Billion Smart Energy Router SG600R2, Firmware v3.02.rc6. A cross-site scripting (XSS) flaw exists in the DHCP lease-status form/table, allowing an attacker to inject arbitrary HTML/JavaScript through crafted DHCP requests to etc_ro/web/internet/dhcpcliinfo.asp, enabling cli...

CVE-2018-14918

creationtimestamp| type| source ---|---|--- 2019-06-28 22:29:28+00:00| seen| https://t.me/cibsecurity/5214 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23...

CVE-2018-14918

LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...

CVE-2018-14918

The CVE-2018-14918 entry concerns Loytec LGATE-902 devices. Affected firmware versions are 6.3.2 (and

Loytec LGATE-902 XSS / Traversal / File Deletion

INFORMATION Product: Loytec LGATE-902 https://www.loytec.com/ Affected versions: 6.4.2 tested on version 6.3.2 CVE IDs: CVE-2018-14919 Stored and reflected XSS, CVE-2018-14918 Path traversal, and CVE-2018-14916 Arbitrary file deletion. Remote-exploit: yes TIMELINE Vendor notification: 26th July,...

CVE-2017-14918

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interface, a Use After Free condition can occur...

CVE-2017-14918

CVE-2017-14918 is documented in multiple sources as a Use-After-Free vulnerability affecting Android on MSM platforms, specifically in the GPS location wireless interface. In the Qualcomm closed-source components section, it is listed with High severity for a closed-source component. The Connecte...