Lucene search
K

7 matches found

OSV
OSV
added 2019/11/25 5:15 p.m.1 views

CVE-2019-18374

Symantec Critical System Protection CSP, versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authentication controls...

9.8CVSS7.2AI score0.00536EPSS
Exploits0References1
CVE
CVE
added 2019/11/25 4:22 p.m.41 views

CVE-2019-18374

CVE-2019-18374 affects Symantec Critical System Protection (CSP) versions 8.0, 8.0 HF1 and 8.0 MP1, with an authentication bypass vulnerability. Root cause details are not fully disclosed in the provided documents, but Red Hat and Symantec advisories indicate an authentication bypass allowing byp...

9.8CVSS9.4AI score0.00536EPSS
Exploits0References1Affected Software1
Symantec
Symantec
added 2019/11/18 7:4 p.m.18 views

Critical System Protection Authentication Bypass

SUMMARY Symantec has released an update to address an issue that was discovered in the Critical System Protection CSP product. AFFECTED PRODUCTS Critical System Protection CSP --- CVE | Affected Versions | Remediation CVE-2019-18374 | 8.0, 8.0 HF1 & 8.0 MP1 | Upgrade to 8.0 MP1 HF1 ISSUES...

7.5CVSS1.9AI score0.00536EPSS
Exploits0Affected Software1
Circl
Circl
added 2019/05/02 8:26 p.m.2 views

CVE-2017-18374

creationtimestamp| type| source ---|---|--- 2019-05-02 20:26:33+00:00| seen| https://t.me/cibsecurity/4077...

9CVSS8.1AI score0.05171EPSS
Exploits1References1
CVE
CVE
added 2019/05/02 4:15 p.m.44 views

CVE-2017-18374

The CVE-2017-18374 entry concerns the ZyXEL P660HN-T1A router (TrueOnline distribution) running TCLinux FW 7.3.15.0 v001 / 3.40(ULM.0)b31. Affected component: router web interface authentication. Root cause: two user accounts exist with default credentials, including a hardcoded service account (...

9CVSS8.7AI score0.05171EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2018/10/16 1:29 a.m.1 views

CVE-2018-18374

XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter...

5.4CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2018/10/16 1:0 a.m.40 views

CVE-2018-18374

The connected Red Hat/NVD/PRION/CVEs entries confirm a cross-site scripting (XSS) vulnerability in MetInfo 6.1.2. Affected component: MetInfo 6.1.2, specifically the admin/index.php page, exploited via the anyid parameter. Root cause described as a reflected/parameter-based XSS flaw in the admin ...

5.4CVSS5.2AI score0.00206EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder