Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-18843 State: PUBLISHED Published: 2020-04-20T15:44:58 Last Updated: 2024-08-05T21:37:44.302Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000049016/Security-Advisory-for-an-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2155
CVE ID: CVE-2017-18844 State: PUBLISHED Published: 2020-04-20T15:43:02 Last Updated: 2024-08-05T21:37:44.283Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000049015/Security-Advisory-for-an-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2149
CVE ID: CVE-2017-18845 State: PUBLISHED Published: 2020-04-20T15:42:07 Last Updated: 2024-08-05T21:37:44.291Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38 and R6800 before 1.1.0.38. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000049014/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Routers-PSV-2017-2137
CVE ID: CVE-2017-18846 State: PUBLISHED Published: 2020-04-20T15:40:55 Last Updated: 2024-08-05T21:37:44.313Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before 1.0.4.12, R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000049013/Security-Advisory-for-Stack-Overflow-on-Some-Routers-PSV-PSV-2017-0793
CVE ID: CVE-2017-18847 State: PUBLISHED Published: 2020-04-20T15:32:16 Last Updated: 2024-08-05T21:37:44.300Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000049012/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-PSV-PSV-2017-0783
CVE ID: CVE-2017-18848 State: PUBLISHED Published: 2020-04-20T15:24:53 Last Updated: 2024-08-05T21:37:44.287Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000049011/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2017-0334
CVE ID: CVE-2017-18849 State: PUBLISHED Published: 2020-04-20T15:23:22 Last Updated: 2024-08-05T21:37:44.399Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R
e 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R8500 before 1.0.2.100_1.0.82. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000048999/Security-Advisory-for-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1209
CVE ID: CVE-2017-18850 State: PUBLISHED Published: 2020-04-20T13:51:46 Last Updated: 2024-08-05T21:37:44.398Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, a
efore 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R8500 before 1.0.2.100_1.0.82. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000048998/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-or-Modem-Routers-PSV-2017-1208
CVE ID: CVE-2017-18851 State: PUBLISHED Published: 2020-04-20T12:50:43 Last Updated: 2024-08-05T21:37:44.346Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000045850/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2017-1207
CVE ID: CVE-2017-18852 State: PUBLISHED Published: 2020-04-20T12:42:02 Last Updated: 2024-08-05T21:37:44.287Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by CSRF and authentication bypass. This affects R7300DST before 1.0.0.54, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and WNDR3400v3 before 1.0.1.14. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000045849/Security-Advisory-for-CSRF-and-Authentication-Bypass-on-Some-Routers-PSV-2017-1206
CVE ID: CVE-2017-18853 State: PUBLISHED Published: 2020-04-29T13:10:31 Last Updated: 2024-08-05T21:37:44.295Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000 1.0.7.10 and earlier, R7000P 1.0.0.58 and earlier, R7100LG 1.0.0.28 and earlier, R7300DST 1.0.0.52 and earlier, R7900 1.0.1.12 and earlier, R8000 1.0.3.46 and
and earlier, R7100LG 1.0.0.28 and earlier, R7300DST 1.0.0.52 and earlier, R7900 1.0.1.12 and earlier, R8000 1.0.3.46 and earlier, R8300 1.0.2.86 and earlier, R8500 1.0.2.86 and earlier, WNDR3400v3 1.0.1.8 and earlier, and WNDR4500v2 1.0.0.62 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000045848/Security-Advisory-for-Password-Recovery-and-File-Access-on-Some-Routers-and-Modem-Routers-PSV-2017-0677
CVE ID: CVE-2017-18854 State: PUBLISHED Published: 2020-04-29T13:13:36 Last Updated: 2024-08-05T21:37:44.279Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000044333/Security-Advisory-for-Operating-System-Command-Injection-on-ReadyNAS-OS-6-Storage-Systems-PSV-2017-2002
CVE ID: CVE-2017-18855 State: PUBLISHED Published: 2020-04-29T13:14:54 Last Updated: 2024-08-05T21:37:44.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR WNR854T devices before 1.5.2 are affected by command execution. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000038833/Security-Advisory-for-Unauthenticated-Command-Execution-on-WNR854T-PSV-2017-2317
CVE ID: CVE-2017-18856 State: PUBLISHED Published: 2020-04-29T13:43:16 Last Updated: 2024-08-05T21:37:44.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000044333/Security-Advisory-for-Operating-System-Command-Injection-on-ReadyNAS-OS-6-Storage-Systems-PSV-2017-2002
CVE ID: CVE-2017-18857 State: PUBLISHED Published: 2020-04-28T16:41:28 Last Updated: 2024-08-05T21:37:44.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NETGEAR Insight application before 2.42 for Android and iOS is affected by password mismanagement. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000038799/Security-Fix-for-Password-Management-in-NETGEAR-Insight-App-PSV-2017-1978
CVE ID: CVE-2017-18858 State: PUBLISHED Published: 2020-04-28T16:43:19 Last Updated: 2024-08-05T21:37:44.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300-52G-POE+ 12.0.2.11 and earlier, M4300-8X8F 12.0.2.11 and earlier, M4300-12X12F 12.0.2.11 and earlier, M4300-24X24F 12.0.2.11 and earlier, M4300-24X 12.0.2.11 and earlier, and M4300-48X 12.0.2.11 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000038655/Secu
2.11 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000038655/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-M4200-and-M4300-PSV-2017-1971
CVE ID: CVE-2017-18859 State: PUBLISHED Published: 2020-04-28T16:45:50 Last Updated: 2024-08-05T21:37:44.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by slowdown/stoppage. This affects C6300 before 2017-05-30, CM400 before 2017-05-30, CM700 before 2017-05-30, and CMD31T before 2017-05-30. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000038560/Security-Advisory-for-Vulnerability-on-Select-Cable-Modems-and-Gateways-PSV-2017-2165
CVE ID: CVE-2017-18860 State: PUBLISHED Published: 2020-04-29T13:38:19 Last Updated: 2024-08-05T21:37:44.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earlier, GS510TLP 6.6.2.6 and earlier, GS510TP 5.04.2.27 and earlier, GS510TPP 6.6.2.6 and earlier, GS716Tv2 5.4.2.27 and earlier, GS716Tv3 6.3.1.16 and earlier, GS724Tv3 5.4.2.27 and earlier, GS724Tv4 6.3.1.16 and earlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 a
rlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 and earlier, GS748Tv5 6.3.1.16 and earlier, GS752TPSB 5.3.0.29 and earlier, GS752TSB 5.3.0.29 and earlier, GS752TXS 6.1.0.35 and earlier, M4200 12.0.2.10 and earlier, M4300 12.0.2.10 and earlier, M5300 11.0.0.28 and earlier, M6100 11.0.0.28 and earlier, M7100 11.0.0.28 and earlier, S3300 6.6.1.4 and earlier, XS708T 6.6.0.11 and earlier, XS712T 6.1.0.34 and earlier, and XS716T 6.6.0.11 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000038519/Security-Advisory-for-Authentication-Bypass-and-Remote-Command-Execution-on-Some-S
s: - https://kb.netgear.com/000038519/Security-Advisory-for-Authentication-Bypass-and-Remote-Command-Execution-on-Some-Smart-and-Managed-Switches-PSV-2017-0857
CVE ID: CVE-2017-18861 State: PUBLISHED Published: 2020-04-28T15:53:13 Last Updated: 2024-08-05T21:37:44.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by CSRF. This affects ReadyNAS Surveillance 1.4.3-15-x86 and earlier and ReadyNAS Surveillance 1.1.4-5-ARM and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000038435/Security-Advisory-for-ReadyNAS-Surveillance-CSRF-Remote-Code-Execution-PSV-2017-0578
CVE ID: CVE-2017-18862 State: PUBLISHED Published: 2020-04-28T15:54:25 Last Updated: 2024-08-05T21:37:44.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000037849/Security-Advisory-fo
. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000037849/Security-Advisory-for-Authentication-Bypass-on-ProSAFE-Web-Managed-Switches-PSV-2015-0043
CVE ID: CVE-2017-18863 State: PUBLISHED Published: 2020-04-28T15:56:07 Last Updated: 2024-08-05T21:37:44.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000037827/Security-Advisory-for-PHP-Vulnerabilities-on-Wireless-Access-Points-PSV-2017-051
ces: - https://kb.netgear.com/000037827/Security-Advisory-for-PHP-Vulnerabilities-on-Wireless-Access-Points-PSV-2017-0517-and-PSV-2016-0258
CVE ID: CVE-2017-18864 State: PUBLISHED Published: 2020-05-05T13:48:35 Last Updated: 2024-08-05T21:37:44.356Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7900 before 1.0.1.18, R8300 before 1.0.2.104, and R8500 before 1.0.2.104. Additional Analyst Notes: - CVE Program Container: References: - https
300 before 1.0.2.104, and R8500 before 1.0.2.104. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000051495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Routers-PSV-2017-0791
CVE ID: CVE-2017-18865 State: PUBLISHED Published: 2020-05-05T13:48:11 Last Updated: 2024-08-05T21:37:44.294Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000051485/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8300-and-R8500-PSV-2017-2228
CVE ID: CVE-2017-18866 State: PUBLISHED Published: 2020-05-05T13:47:53 Last Updated: 2024-08-05T21:37:44.306Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, WNDR4300v2 before 1.0.0.48, and WNR2000v5 before 1.0.0.58. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000051472/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Routers-PSV-2016-0100
CVE ID: CVE-2017-18867 State: PUBLISHED Published: 2020-05-05T13:47:18 Last Updated: 2024-08-05T21:37:44.311Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:P/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000049554/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2198
CVE ID: CVE-2017-18868 State: PUBLISHED Published: 2020-05-21T19:13:43 Last Updated: 2024-08-05T21:37:44.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built. Additional Analyst Notes: - CVE Program Container: References: - https://www.hindawi.com/journals/scn/2017/1723658/
CVE ID: CVE-2017-18869 State: PUBLISHED Published: 2020-06-15T14:33:51 Last Updated: 2024-08-05T21:37:44.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/isaacs/chownr/issues/14 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863985 - https://bugzilla.redhat.com/show_bug.cgi?id=1611614 - https://snyk.io/vuln/npm:chownr:20180731
CVE ID: CVE-2017-18870 State: PUBLISHED Published: 2020-06-19T16:47:11 Last Updated: 2024-08-05T21:37:44.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18871 State: PUBLISHED Published: 2020-06-19T16:51:40 Last Updated: 2024-08-05T21:37:44.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service (application crash) via an @ character before a JavaScript field name. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18872 State: PUBLISHED Published: 2020-06-19T17:44:11 Last Updated: 2024-08-05T21:37:44.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18873 State: PUBLISHED Published: 2020-06-19T17:44:12 Last Updated: 2024-08-05T21:37:44.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to cause a denial of service (channel invisibility) via a misformatted post. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18874 State: PUBLISHED Published: 2020-06-19T18:07:29 Last Updated: 2024-08-05T21:37:44.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18875 State: PUBLISHED Published: 2020-06-19T16:47:13 Last Updated: 2024-08-05T21:37:44.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18876 State: PUBLISHED Published: 2020-06-19T16:50:02 Last Updated: 2024-08-05T21:37:44.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of an arbitrary file. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18877 State: PUBLISHED Published: 2020-06-19T16:50:36 Last Updated: 2024-08-05T21:37:44.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18878 State: PUBLISHED Published: 2020-06-19T18:08:20 Last Updated: 2024-08-05T21:37:44.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. Knowledge of a session ID allows revoking another user's session. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18879 State: PUBLISHED Published: 2020-06-19T18:08:42 Last Updated: 2024-08-05T21:37:44.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the author_link field of a Slack attachment. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18880 State: PUBLISHED Published: 2020-06-19T18:42:54 Last Updated: 2024-08-05T21:37:44.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the title_link field of a Slack attachment. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2017-18881 State: PUBLISHED Published: 2020-06-19T18:08:44 Last Updated: 2024-08-05T21:37:44.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via a goto_location response to a slash command. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/