Linux Distros Unpatched Vulnerability : CVE-2020-18735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in /src/ddsstream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash. CVE-2020-18735 Note that Nessus...

CVE-2020-18735

creationtimestamp| type| source ---|---|--- 2021-08-24 00:23:29+00:00| seen| https://t.me/cibsecurity/27729...

CVE-2020-18735

A heap buffer overflow in /src/ddsstream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...

CVE-2020-18735

A heap buffer overflow in /src/ddsstream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...

CVE-2020-18735

A heap buffer overflow in /src/ddsstream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...

CVE-2020-18735

A heap buffer overflow in /src/ddsstream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...

CVE-2020-18735

CVE-2020-18735 relates to Eclipse IoT Cyclone DDS Project v0.1.0, with a heap buffer overflow in /src/dds_stream.c that causes the DDS subscriber server to crash. The connected documents confirm the root cause and the vulnerable file, and consistently describe a crash as the impact. No exploitati...

CVE-2017-18735

creationtimestamp| type| source ---|---|--- 2020-04-23 22:07:13+00:00| seen| https://t.me/cibsecurity/11591...

CVE-2017-18735

CVE-2017-18735 affects multiple NETGEAR routers with unauthenticated command injection. Affected devices and vulnerable versions include: JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, and R6700v2/R6800/R6900v2 before 1.2.0.4. Root cause is a pre-authentication command inj...

CVE-2017-18735

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, and R6900v2 before 1.2.0.4...

CVE-2019-18735

...

CVE-2019-18735

CVE-2019-18735 entry is rejected and not used; it does not represent an active vulnerability.

CVE-2018-18735

CVE-2018-18735 describes a cross-site request forgery in Catfish Blog 2.0.33, specifically in the admin/Index/tiquan functionality. The CVE entry notes a CSRF vulnerability that could allow an attacker to affect user roles (e.g., change user type) given the documented access path. From the initia...