cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2018-18291,https://securityvulnerability.io/vulnerability/CVE-2018-18291,,"A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML via Advanced_ASUSDDNS_Content.asp, Advanced_WSecurity_Content.asp, Advanced_Wireless_Content.asp, Logout.asp, Main_Login.asp, MobileQIS_Login.asp, QIS_wizard.htma, YandexDNS.asp, ajax_status.xml, apply.cgi, clients.asp, disk.asp, disk_utility.asp, or internet.asp.",Asus,Rt-ac58u Firmware,6.1,MEDIUM,0.0019000000320374966,false,false,false,false,,false,false,2018-10-14T21:29:00.000Z,0 CVE-2018-18287,https://securityvulnerability.io/vulnerability/CVE-2018-18287,,"On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the Main_Login.asp page.",Asus,Rt-ac58u Firmware,5.3,MEDIUM,0.00215999991632998,false,false,false,false,,false,false,2018-10-14T21:00:00.000Z,0