Capitan Alfalo

#619of 60,592
349.2Total CVSS
Vulnerabilities · 41
Medium
10
High
5
Critical
26
PT-2019-15246
2019-10-17
5.4
CVE-2019-17667
Comtech
Comtech H8 Heights Remote Gateway
The issue allows for XSS and HTML injection attacks through the `SiteName` field.
PT-2019-15052
2019-10-06
10
CVE-2019-17269
Intellian
Intellian Remote Access
The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the `Ping Test` field.
PT-2019-14627
2019-09-15
6.1
CVE-2019-16321
Scadabr
Scadabr
The issue is related to a request for a nonexistent resource. It can be exploited via the "dwr/test/" PATH INFO, allowing for XSS attacks.
PT-2018-15382
2018-12-25
9.8
CVE-2018-20443
Technicolor
Tc7200
The issue allows remote attackers to discover Wi-Fi credentials. This is achieved through specific SNMP requests, including `iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001` and `1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001`.
PT-2018-15379
2018-12-25
9.8
CVE-2018-20440
Technicolor
Technicolor Cwa0101
The issue allows remote attackers to discover Wi-Fi credentials. This is achieved through specific SNMP requests, including `iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001` and `1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001`.
PT-2018-15383
2018-12-25
9.8
CVE-2018-20444
Technicolor
Technicolor Cga0111
The issue allows remote attackers to discover Wi-Fi credentials. This is achieved via specific SNMP requests, including `iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001` and `1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001`.
PT-2018-2105
2018-12-25
10
CVE-2018-20445
D Link
Dcm-704
The issue is related to errors in processing SNMP requests, which can allow a remote attacker to disclose credentials. Specifically, attackers can discover Wi-Fi credentials via `iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32` and `iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32` SNMP requests.
PT-2018-15377
2018-12-25
5.0
CVE-2018-20438
Technicolor
Technicolor Tc7110.Ar Std
The issue allows remote attackers to discover Wi-Fi credentials. This is achieved through specific SNMP requests, including `iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32` and `iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32`.
PT-2018-15380
2018-12-25
9.8
CVE-2018-20441
Technicolor
Tc7200
The issue allows remote attackers to discover Wi-Fi credentials. This is achieved through specific SNMP requests, including `iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32` and `iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32`.
PT-2018-15378
2018-12-25
9.8
CVE-2018-20439
Technicolor
Dpc3928Sl
The issue allows remote attackers to discover Wi-Fi credentials. This is achieved through specific SNMP requests, including `iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001` and `1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001`.
PT-2018-15375
2018-12-24
8.1
CVE-2018-20436
Telegram
Telegram
The issue concerns a side channel in the "secret chat" feature where Telegram servers send GET requests for URLs typed while composing a chat message, before the message is sent. Additionally, GET requests are sent to other URLs on the same web server. This can also be interpreted as a Server-Side Request Forgery (SSRF) issue. A third party has reported that the behavior may be caused by misconfiguration of the "Secret chats > Preview links" setting.
PT-2018-15343
2018-12-23
9.8
CVE-2018-20390
Kaonmedia
Kaonmedia Cg2001-An22A
The issue allows remote attackers to discover credentials via specific SNMP requests, including `iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0` and `iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0`.
PT-2018-15333
2018-12-23
4.7
CVE-2018-20379
Technicolor
Dpc3928Sl
The issue allows for a Cross Protocol Injection attack, which can lead to a Cross-Site Scripting (XSS) attack. This is achieved by exploiting the `setSSID` of `1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001`.
PT-2018-15344
2018-12-23
9.8
CVE-2018-20391
Teknotel
Teknotel Cbw700N
The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0".
PT-2018-15342
2018-12-23
9.8
CVE-2018-20388
Comtrend
Comtrend Cm-6300N
The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0".
PT-2018-15341
2018-12-23
9.8
CVE-2018-20387
Bnmux
Bnmux Bcw710J
The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0".
PT-2018-15354
2018-12-23
9.8
CVE-2018-20401
Zoom
Zoom
The issue allows remote attackers to discover credentials via specific SNMP requests, including `iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0` and `iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0`.
PT-2018-15338
2018-12-23
9.8
CVE-2018-20384
Inovo Broadband
Inovo Broadband Ib-8120-W21
The issue allows remote attackers to discover credentials via specific SNMP requests, including `iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0` and `iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0`.
PT-2018-15351
2018-12-23
9.8
CVE-2018-20398
Skyworth
Skyworth Cm5100.G2
The issue allows remote attackers to discover credentials via specific SNMP requests, including `iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0` and `iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0`.
PT-2018-15337
2018-12-23
9.8
CVE-2018-20383
Arris
Arris Dg950A
The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0".