CVE-2018-12705

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jun 24, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-127069.8DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.CVE-2018-12715.9Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configuCVE-2018-127108.0An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilegCVE-2018-127116.1An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9. In some cases, the link of the currCVE-2018-127128.8An issue was discovered in Joomla! 2.5.0 through 3.8.8 before 3.8.9. The autoload code checks classnames to be valid, using the "class_existCVE-2018-127139.1GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonCVE-2018-127149.8An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with noCVE-2018-127156.1DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged.CVE-2018-127164.3The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_resuCVE-2018-12727.5Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support fCVE-2018-12739.8Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilitCVE-2018-127357.5SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inverter_info.htm or eng
CVE-2018-12705: Medium severity, CVSS 6.1 | Vulnix