Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
id=jp.tjoy.kinepass&hl=en - https://jvn.jp/en/jp/JVN83671755/ - https://itunes.apple.com/us/app/kinepasu-apuridekantan-bian/id637453055?mt=8
CVE ID: CVE-2018-0592 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.192Z Vendors: Microsoft Products: Microsoft OneDrive Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN91151862/index.html - http://www.securityfocus.com/bid/104563
CVE ID: CVE-2018-0593 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.255Z Vendors: Microsoft Products: The installer of Microsoft OneDrive Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN91151862/index.html - http://www.securityfocus.com/bid/104563
CVE ID: CVE-2018-0594 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.236Z Vendors: Microsoft Products: Skype for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN91151862/index.html - http://www.securityfocus.com/bid/104563
CVE ID: CVE-2018-0595 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.189Z Vendors: Microsoft Products: The installer of Skype for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN91151862/index.html - http://www.securityfocus.com/bid/104563
CVE ID: CVE-2018-0596 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.126Z Vendors: Microsoft Products: The installer of Visual Studio Community Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Visual Studio Community allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN91151862/index.html - http://www.securityfocus.com/bid/104563
CVE ID: CVE-2018-0597 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.157Z Vendors: Microsoft Products: The installer of Visual Studio Code Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN91151862/index.html - http://www.securityfocus.com/bid/104563
CVE ID: CVE-2018-0598 State: PUBLISHED Published: 2018-06-26T00:00:00 Last Updated: 2024-08-05T03:28:11.157Z Vendors: Microsoft Products: Self-extracting archive files created by IExpress bundled with Microsoft Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN72748502/index.html - https
microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN72748502/index.html - https://msrc.microsoft.com/blog/2018/04/triaging-a-dll-planting-vulnerability/
CVE ID: CVE-2018-0599 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.183Z Vendors: Microsoft Products: The installer of Visual C++ Redistributable Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Visual C++ Redistributable allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.technet.microsoft.com/srd/2018/04/04/triaging-a-dll-planting-vulnerability/ - http://jvn.jp/en/jp/JVN81196185/index.html
CVE ID: CVE-2018-0600 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.195Z Vendors: Sony Corporation Products: the installer of PlayMemories Home for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/ja/index.html - http://jvn.jp/en/jp/JVN13940333/index.html
CVE ID: CVE-2018-0601 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.170Z Vendors: Yasutaka ATARASHI Products: axpdfium Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in axpdfium v0.01 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN79301396/index.html - https://github.com/yak1ex/axpdfium/wiki/JVN%2379301396%28en%29
CVE ID: CVE-2018-0602 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.435Z Vendors: icegram Products: Email Subscribers & Newsletters Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN16471686/index.html - https://wordpress.org/plugins/email-subscribers/#developers - https://wpvulndb.com/vulnerabilities/9101
CVE ID: CVE-2018-0603 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.231Z Vendors: Gemini Labs Products: Site Reviews Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9102 - http://jvn.jp/en/jp/JVN60978548/index.html - https://wordpress.org/plugins/site-reviews/#developers
CVE ID: CVE-2018-0604 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.151Z Vendors: Pixelpost.org Products: Pixelpost Problem Types: Remote code execution Description: Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN27978559/index.html
CVE ID: CVE-2018-0605 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.153Z Vendors: Pixelpost.org Products: Pixelpost Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN27978559/index.html
CVE ID: CVE-2018-0606 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.296Z Vendors: Pixelpost.org Products: Pixelpost Problem Types: SQL Injection Description: SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN27978559/index.html
CVE ID: CVE-2018-0607 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.239Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: SQL Injection Description: SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN13415512/index.html - https://kb.cybozu.support/article/33120/
CVE ID: CVE-2018-0608 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.160Z Vendors: Kazuho Oku Products: H2O Problem Types: Buffer Overflow Description: Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN93226941/index.html - https://github.com/h2o/h2o/issues/1775
CVE ID: CVE-2018-0609 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in LINE for Windows versions before 5.8.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN92265618/index.html - https://linecorp.com/en/security/article/172
CVE ID: CVE-2018-0610 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.372Z Vendors: Zenphoto Products: Zenphoto Problem Types: Local file inclusion vulnerability Description: Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.zenphoto.org/news/zenphoto-1.5 - http://jvn.jp/en/jp/JVN33124193/index.html
CVE ID: CVE-2018-0611 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.162Z Vendors: ALL NIPPON AIRWAYS CO., LTD Products: ANA App for iOS Problem Types: Fails to verify SSL certificates Description: The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN71535108/index.html - https://www.ana.co.jp/ja/jp/share/mobile/smartphone/app_ana/#title
CVE ID: CVE-2018-0612 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.272Z Vendors: Owen Products: 5000 trillion yen converter Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in 5000 trillion yen converter v1.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN98975951/index.html - https://chrome.google.com/webstore/detail/5000%E5%85%86%E5%86%86%E3%82%B3%E3%83%B3%E3%83%90%E3%83%BC%E3%82%BF%E3%83%BC/mgaphgebhfgmkahikdhdomnnpelbijmo
CVE ID: CVE-2018-0613 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.281Z Vendors: NEC Platforms, Ltd. Products: Calsos CSDX and CSDJ series products Problem Types: Fails to restrict access Description: NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote authenticated attackers to bypass access restriction to conduct arbitrary operations with administrative privilege via unspecified vectors. Additional Analyst Notes: -
ction to conduct arbitrary operations with administrative privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.necplatforms.co.jp/product/enkaku/info180702.html - http://jvn.jp/en/jp/JVN63895206/index.html
CVE ID: CVE-2018-0614 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.374Z Vendors: NEC Platforms, Ltd. Products: Calsos CSDX and CSDJ series products Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: Referenc
inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.necplatforms.co.jp/product/enkaku/info180702.html - http://jvn.jp/en/jp/JVN63895206/index.html
CVE ID: CVE-2018-0617 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.297Z Vendors: ChamaNet Products: MemoCGI Problem Types: Directory traversal Description: Directory traversal vulnerability in ChamaNet MemoCGI v2.1800 to v2.2200 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58362455/index.html - http://www.chama.ne.jp/download/etc/memo/index.htm
CVE ID: CVE-2018-0618 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.167Z Vendors: GNU Mailman Products: Mailman Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://mail.python.org/pipermail/mailman-announce/2018-June/000236.html - https://www.debian.org/security/2018/dsa-4246 - https://lists.debian.org/debian-lts-announce/2018/07/msg00034.html - http://jvn.jp/en/jp/JVN00846677/index.html - https://security.gentoo.org/glsa/2
ian-lts-announce/2018/07/msg00034.html - http://jvn.jp/en/jp/JVN00846677/index.html - https://security.gentoo.org/glsa/201904-10 - https://usn.ubuntu.com/4348-1/
CVE ID: CVE-2018-0619 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.200Z Vendors: Glarysoft Ltd. Products: Installer of Glary Utilities Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Glarysoft Glary Utilities (Glary Utilities 5.99 and earlier and Glary Utilities Pro 5.99 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN84967039/index.html
CVE ID: CVE-2018-0620 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.360Z Vendors: Logicool Co Ltd. Products: the installer of LOGICOOL Game Software Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52574492/index.html
CVE ID: CVE-2018-0621 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.346Z Vendors: Logicool Co Ltd. Products: the installer of LOGICOOL CONNECTION UTILITY SOFTWARE Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30.9 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52574492/index.html
CVE ID: CVE-2018-0622 State: PUBLISHED Published: 2018-07-26T17:00:00 Last Updated: 2024-08-05T03:28:11.369Z Vendors: DHC Corporation Products: DHC Online Shop App for Android Problem Types: Fails to verify SSL certificates Description: The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN77409513/index.html
CVE ID: CVE-2018-0623 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:28:11.346Z Vendors: Yayoi Co., Ltd. Products: Multiple Yayoi 17 Series products Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver. 20.0.2 and earlier, and Yayoi Kokyaku Kanri 17 Ver.11.0.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exi
0.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of msjet49.dll loaded by the vulnerable products. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN06813756/index.html
CVE ID: CVE-2018-0624 State: PUBLISHED Published: 2018-09-07T14:00:00 Last Updated: 2024-08-05T03:28:11.317Z Vendors: Yayoi Co., Ltd. Products: Multiple Yayoi 17 Series products Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver.20.0.2 and earlier, and Yayoi Kokyaku Kanri 17 Ver.11.0.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exis
.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of ykkapi.dll loaded by the vulnerable products. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN06813756/index.html
CVE ID: CVE-2018-0625 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:28:11.296Z Vendors: NEC Corporation Products: WG1200HP Problem Types: OS Command Injection Description: Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN00401783/index.html
CVE ID: CVE-2018-0626 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.771Z Vendors: NEC Corporation Products: WG1200HP Problem Types: OS Command Injection Description: Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN00401783/index.html
CVE ID: CVE-2018-0627 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:48.747Z Vendors: NEC Corporation Products: WG1200HP Problem Types: OS Command Injection Description: Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN00401783/index.html
CVE ID: CVE-2018-0628 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.854Z Vendors: NEC Corporation Products: WG1200HP Problem Types: OS Command Injection Description: Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN00401783/index.html
CVE ID: CVE-2018-0629 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.841Z Vendors: NEC Corporation Products: Aterm W300P Problem Types: OS Command Injection Description: Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN26629618/index.html
CVE ID: CVE-2018-0630 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.788Z Vendors: NEC Corporation Products: Aterm W300P Problem Types: OS Command Injection Description: Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN26629618/index.html
CVE ID: CVE-2018-0631 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.789Z Vendors: NEC Corporation Products: Aterm W300P Problem Types: OS Command Injection Description: Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN26629618/index.html
CVE ID: CVE-2018-0632 State: PUBLISHED Published: 2019-01-09T22:00:00 Last Updated: 2024-08-05T03:35:47.840Z Vendors: NEC Corporation Products: Aterm W300P Problem Types: Buffer Overflow Description: Buffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary code via HTTP request and response. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv18-011.html - https://jvn.jp/en/jp/JVN26629618/index.html