Lucene search
+L

9 matches found

NVD
NVD
added 2026/08/04 12:16 a.m.11 views

CVE-2026-18685

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function setupgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

10CVSS0.01989EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/03 11:15 p.m.66 views

CVE-2026-18685

CVE-2026-18685 affects GL.iNet GL-MT3000 devices up to firmware 4.4.5, specifically the function set_upgrade in /cgi-bin/glc of the component modem.so. The issue enables remote command injection due to the underlying vulnerability; attack vector is network with no authentication and no user inter...

10CVSS7.2AI score0.01989EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/01/09 10:33 a.m.11 views

CVE-2017-18685

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 software. The InputMethod application can cause a system crash via a malformed serializable object in an Intent. The Samsung ID is SVE-2016-7123 February 2017...

7.8CVSS7AI score0.00422EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:8 p.m.13 views

CVE-2020-18685

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs...

9.8CVSS7AI score0.01292EPSS
SaveExploits1
OSV
OSV
added 2021/09/30 2:15 a.m.11 views

CVE-2020-18685

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs...

9.8CVSS5.8AI score0.01292EPSS
SaveExploits1References1
CVE
CVE
added 2021/09/30 1:18 a.m.59 views

CVE-2020-18685

CVE-2020-18685 concerns Floodlight (OpenFlow controller) up to version 1.2. The root cause is poor input validation in the checkFlow method of StaticFlowEntryPusherResource.java, arising from unchecked prerequisites related to TCP/UDP ports and group or table IDs. The vulnerability’s impact per t...

9.8CVSS9.3AI score0.01292EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/04/07 2:16 p.m.56 views

CVE-2017-18685

Summary (CVE-2017-18685): An issue in Samsung mobile devices running KK (4.4), L (5.0/5.1), and M (6.0) where the InputMethod application can crash the system via a malformed serializable object in an Intent. The Samsung internal reference is SVE-2016-7123 (February 2017). The Red Hat and CNVD en...

7.8CVSS7.5AI score0.00422EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/11/04 8:17 p.m.11 views

CVE-2019-18685

...

SaveExploits0
CVE
CVE
added 2019/11/04 8:17 p.m.41 views

CVE-2019-18685

This CVE entry is rejected/not used and does not represent an active vulnerability.

7.4AI score
SaveExploits0
Rows per page
Query Builder