CVE-2018-18320

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote co...

RockyLinux 10 : thunderbird (RLSA-2025:18320)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:18320 advisory. thunderbird: firefox: Memory safety bugs CVE-2025-11714 thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL...

CVE-2019-18320

creationtimestamp| type| source ---|---|--- 2024-03-11 12:41:49+00:00| seen| https://t.me/ctinow/204651...

CVE-2019-18320

CVE-2019-18320 affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). The vulnerability allows an attacker with network access to upload arbitrary files without authentication. Public exploits are not indicated in the provided documents; however, exploitation...

CVE-2017-18320

creationtimestamp| type| source ---|---|--- 2019-01-03 18:17:45+00:00| seen| https://t.me/cibsecurity/1854...

CVE-2017-18320

QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 ...

CVE-2017-18320

CVE-2017-18320 describes a data abort in QSEE when unloading on a third-party TEE without prior loading, affecting Qualcomm Snapdragon automotive/mobile platforms across numerous SoCs (e.g., MSM8996AU, SD 410/12, 820, 835, 650/52, 710/670, 810, 820A, 835, 660, several SDM/SXR variants). The linke...

CVE-2017-18320

QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 ...

CVE-2018-18320

This CVE affects the Merlin.PHP component (version 0.6.6) used in Asuswrt-Merlin devices. The vulnerability is a remote code execution due to a popen call in exec.php, allowing an attacker to execute arbitrary commands. The vendor notes Merlin.PHP is intended for trusted intranet use, which impli...