EUVD-2018-1227

Malware in sbrugna...

EUVD-2018-1228

Malware in sbrugna...

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows attackers to disclose protected information.

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose...

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows a intruder to disclose or modify protected information.

The vulnerability in the code of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in improper cleaning of data entered by users in HTTP requests. Exploiting this vulnerability allows a malicious actor to...

Cisco RV180W Wireless-N Multifunction VPN Router WEB Framework Directory Traversal Vulnerability

The Cisco RV180W Wireless-N Multifunction VPN Router is a multifunction VPN router device. A directory traversal vulnerability exists in the Cisco RV180W Wireless-N Multifunction VPN Router WEB framework, which stems from the program failing to properly filter user-submitted input in HTTP request...

Design/Logic Flaw

A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information...

CVE-2018-0404: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information...

CVE-2018-0405: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to conduct a directory path traversal attack on a targeted device. The issue is due...

CVE-2016-1429: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuz43023...

CVE-2016-1430: Improper Input Validation

Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTTP request, aka Bug ID CSCuz48592...