Mongoose Web Server <= 6.13 Multiple Vulnerabilities

Mongoose Web Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

CVE-2017-18764

creationtimestamp| type| source ---|---|--- 2020-04-22 21:37:03+00:00| seen| https://t.me/cibsecurity/11535...

CVE-2017-18764

CVE-2017-18764 affects a wide range of NETGEAR devices (e.g., D6100, D7000, D7800, JNR1010v2, JR6150, JWNR2010v5, PR2000, R6050, R6100, R6120, R6220, R6700v2, R6800, R6900v2, R7500, R7500v2, R7800, R9000, WN3000RPv3, WNDR3700 variants, WNDR4300 variants, WNR1000/2000/2020/2050, etc.) where the co...

CVE-2019-18764

...

CVE-2019-18764

CVE-2019-18764 is a rejected candidate; this CVE ID was withdrawn and is not an active vulnerability entry.

CVE-2018-18764

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in a parsemqtt getu16 call. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially...

CVE-2018-18764

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in a parsemqtt getu16 call. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially...

CVE-2018-18764

CVE-2018-18764 : Cesanta Mongoose 6.13 contains a heap-based buffer over-read in the MQTT packet-parsing function (parse_mqtt getu16). A specially crafted MQTT SUBSCRIBE packet over the network can trigger an arbitrary out-of-bounds memory read, potentially leading to information disclosure and d...

SturGeoN Upload Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18764/info SturGeoN Upload is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitat...