CVE-2019-15805

CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/login.html. Any user connected to the Wi-Fi can exploit this...

CVE-2019-15805

The CVE-2019-15805 entry concerns CommScope ARRIS TR4400 routers. Affected firmware versions up to A1.00.004-180301 expose the current password encoded in base64 on the login.html page (http://192.168.1.1/login.html), enabling an authentication bypass. Impact is described as high (CVSS3 base scor...

CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

CVE-2018-15805

CVE-2018-15805 affects Accusoft PrizmDoc HTML5 Document Viewer prior to version 13.5. The vulnerability is an XML external entity (XXE) flaw that enables an attacker to read arbitrary files or trigger resource exhaustion leading to denial of service. The root cause is improper handling of XML ext...

CVE-2018-15805

creationtimestamp| type| source ---|---|--- 2018-11-13 14:25:54+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/2023 2023-06-09 14:01:37+00:00| published-proof-of-concept| https://t.me/GhostPrincess/12197 2024-05-12 12:35:21+00:00| published-proof-of-concept|...

CVE-2017-15805

Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files...

CVE-2017-15805

Cisco Small Business SA520/SA540 devices with firmware 2.1.71 and 2.2.0.7 are affected by a directory traversal vulnerability in scgi-bin/platform.cgi via the thispage parameter, enabling reading of arbitrary files. Root cause: improper validation of the thispage parameter leading to path travers...