Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8242 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T08:13:31.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2550.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html -
m/archives/security-announce/2016/Mar/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - http://www.openwall.com/lists/oss-security/2015/11/17/5 - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e435100e2f3b1a2 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://xmlsoft.org/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=1281950 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.apple.com/archives/security-announce/2016/Mar/
hnetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://www.ubuntu.com/usn/USN-2834-1 - http://www.openwall.com/lists/oss-security/2015/11/18/23 - http://www.securitytracker.com/id/1034243 - http://rhn.redhat.com/errata/RHSA-2015-2549.html - https://bugzilla.gnome.org/show_bug.cgi?id=756372 - http://marc.info/?l=bugtraq&m=145382616617563&w=2 - http://www.securityfocus.com/bid/77681 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201701-37 - http://li
le.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201701-37 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166
CVE ID: CVE-2015-8247 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T08:13:31.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in synnefoclient in Synnefo Internet Management Software (IMS) 2015 allows remote attackers to inject arbitrary web script or HTML via the plan_name parameter to packagehistory/listusagesdata. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537099/100/0/threaded - http://packetstormsecurity.com/files/134797/Synnefo-Client-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2015/Dec/54
CVE ID: CVE-2015-8248 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8249 State: PUBLISHED Published: 2017-09-27T17:00:00 Last Updated: 2024-08-06T08:13:31.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134806/ManageEngine-Desktop-Central-9-FileUploadServlet-ConnectionId.html - http://www.rapid7.com/db/modules/exploit/windows/http/manageengine_connectionid_write - https://www.exploit-db.com/exploits/38982/ - https://community.rapid7.com/community/infosec
eengine_connectionid_write - https://www.exploit-db.com/exploits/38982/ - https://community.rapid7.com/community/infosec/blog/2015/12/14/r7-2015-22-manageengine-desktop-central-9-fileuploadservlet-connectionid-vulnerability-cve-2015-8249
CVE ID: CVE-2015-8251 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T08:13:31.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/566724 - https://networks.unify.com/security/advisories
Program Container: References: - http://www.kb.cert.org/vuls/id/566724 - https://networks.unify.com/security/advisories/OBSO-1511-02.pdf - https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdf - https://www.kb.cert.org/vuls/id/BLUU-A2PPZE
CVE ID: CVE-2015-8252 State: PUBLISHED Published: 2015-12-27T02:00:00 Last Updated: 2024-08-06T08:13:31.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows remote attackers to determine a hardcoded key by sniffing the network and performing a "jumbled up" calculation with this number. Additional Analyst Notes: - CVE Program Container: References: - http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/ - https://www.kb.cert.org/vuls/id/792004
CVE ID: CVE-2015-8253 State: PUBLISHED Published: 2015-12-27T02:00:00 Last Updated: 2024-08-06T08:13:31.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain sensitive (1) message or (2) MJPEG video data by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/ - https://www.kb.cert.org/vuls/id/792004
CVE ID: CVE-2015-8254 State: PUBLISHED Published: 2015-12-27T02:00:00 Last Updated: 2024-08-06T08:13:31.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to (1) initiate a false alarm or (2) deactivate an alarm by modifying the client-server data stream. Additional Analyst Notes: - CVE Program Container: References: - http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/ - https://www.kb.cert.org/vuls/id/792004
CVE ID: CVE-2015-8255 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T08:13:31.989Z Vendors: n/a Products: AXIS Communications products Problem Types: CSRF Description: AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41626/
CVE ID: CVE-2015-8256 State: PUBLISHED Published: 2017-04-17T16:00:00 Last Updated: 2024-08-06T08:13:32.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/141674/AXIS-Network-Camera-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/39683/ - http://www.securityfocus.com/bid/97699
CVE ID: CVE-2015-8257 State: PUBLISHED Published: 2017-05-02T14:00:00 Last Updated: 2024-08-06T08:13:31.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in the app parameter to (1) app_license.shtml, (2) app_license_custom.shtml, (3) app_index.shtml, or (4) app_params.shtml. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/138083/AXIS-Authenticated-Remote-Command-Execution.html - http://www.securityfocus.com/bid/92159 - https://www.exploit-db.com/exploits/40171/
CVE ID: CVE-2015-8258 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T08:13:31.673Z Vendors: n/a Products: AXIS Communications products with firmware through 5.80.x Problem Types: resource injection Description: AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41625/
CVE ID: CVE-2015-8261 State: PUBLISHED Published: 2016-01-08T02:00:00 Last Updated: 2024-08-06T08:13:31.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034613 - https://www.kb.cert.org/vuls/id/753264 - https://www.exploit-db.com/exploits/39231/
CVE ID: CVE-2015-8262 State: PUBLISHED Published: 2015-12-27T02:00:00 Last Updated: 2024-08-06T08:13:31.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78877 - https://www.kb.cert.org/vuls/id/646008
CVE ID: CVE-2015-8263 State: PUBLISHED Published: 2015-12-27T02:00:00 Last Updated: 2024-08-06T08:13:32.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78873 - https://www.kb.cert.org/vuls/id/403568
CVE ID: CVE-2015-8264 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-06T08:13:32.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537803/100/0/threaded - https://www.f-secure.com/en/web/labs_global/fsc-2015-4 - http://www.securityfocus.com/bid/79657 - http://seclists.org/fulldisclosure/2016/Mar/64
CVE ID: CVE-2015-8265 State: PUBLISHED Published: 2016-02-01T21:00:00 Last Updated: 2024-08-06T08:13:31.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it easier for remote attackers to spoof responses via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82246 - https://www.kb.cert.org/vuls/id/972224 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160129-01-dns-en
CVE ID: CVE-2015-8267 State: PUBLISHED Published: 2015-12-24T00:00:00 Last Updated: 2024-08-06T08:13:32.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79642 - http://www.dovestones.com/security-vulnerability-in-ad-self-password-reset-v3-0-3-0/ - https://www.kb.cert.org/vuls/id/757840
CVE ID: CVE-2015-8268 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T08:13:31.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.uptimesoftware.com/display/UT/Release+Notes - http://www.kb.cert.org/vuls/id/204232 - http://jira.uptimesoftware.com/browse/UT-16039
CVE ID: CVE-2015-8269 State: PUBLISHED Published: 2016-02-04T11:00:00 Last Updated: 2024-08-06T08:13:32.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/GWAN-A6LPPW - https://community.rapid7.com/community/infosec/blog/2016/02/02/security-vulnerabilities-within-fisher-price-smart-toy-hereo-gps-platform - https://www.kb.cert.org/vuls/id/719736
CVE ID: CVE-2015-8270 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T08:13:31.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0066/ - http://www.debian.org/security/2017/dsa-3850 - http://www.securityfocus.com/bid/95126
CVE ID: CVE-2015-8271 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T08:13:31.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0067/ - http://www.securityfocus.com/bid/95125 - http://www.debian.org/security/2017/dsa-3850
CVE ID: CVE-2015-8272 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T08:13:31.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0068/ - http://www.debian.org/security/2017/dsa-3850 - http://www.securityfocus.com/bid/95123
CVE ID: CVE-2015-8275 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T08:13:31.761Z Vendors: n/a Products: LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 Problem Types: write to arbitrary files Description: LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to write to arbitrary files via crafted EDOC files. Additional Analyst Notes: - CVE Program Container: References: - https://cert.lv/en/2016/01/new-cve-information-avialable
CVE ID: CVE-2015-8276 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T08:13:32.015Z Vendors: n/a Products: LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 Problem Types: read arbitrary files Description: LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary files via crafted EDOC files. Additional Analyst Notes: - CVE Program Container: References: - https://cert.lv/en/2016/01/new-cve-information-avialable
CVE ID: CVE-2015-8277 State: PUBLISHED Published: 2016-02-24T02:00:00 Last Updated: 2024-08-06T08:13:31.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a. Additional Analyst Notes: - CVE Program Container: References: - https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec129.pdf - http://securitymumblings.blogspot.com/2016/02/cve-2015-8277.html - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133 - ht
s.blogspot.com/2016/02/cve-2015-8277.html - https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133 - https://ics-cert.us-cert.gov/advisories/ICSA-18-212-05 - http://www.securitytracker.com/id/1035266 - http://support.citrix.com/article/CTX207824 - http://www.kb.cert.org/vuls/id/485744 - https://www.securifera.com/advisories/cve-2015-8277 - https://ics-cert.us-cert.gov/advisories/ICSA-18-102-02 - http://www.securityfocus.com/bid/83334
CVE ID: CVE-2015-8279 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T08:13:31.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/913000
CVE ID: CVE-2015-8280 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T08:13:32.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/913000
CVE ID: CVE-2015-8281 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T08:13:32.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/913000
CVE ID: CVE-2015-8282 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T08:13:32.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135311/SeaWell-Networks-Spectrum-SDC-02.05.00-Traversal-Privilege-Escalation.html - https://www.exploit-db.com/exploits/39266/ - http://seclists.org/fulldisclosure/2016/Jan/58
CVE ID: CVE-2015-8283 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T08:13:32.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135311/SeaWell-Networks-Spectrum-SDC-02.05.00-Traversal-Privilege-Escalation.html - https://www.exploit-db.com/exploits/39266/ - http://seclists.org/fulldisclosure/2016/Jan/58
CVE ID: CVE-2015-8284 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T08:13:32.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135311/SeaWell-Networks-Spectrum-SDC-02.05.00-Traversal-Privilege-Escalation.html - https://www.exploit-db.com/exploits/39266/ - http://seclists.org/fulldisclosure/2016/Jan/58
CVE ID: CVE-2015-8285 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T08:13:32.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39475/ - http://www.securityfocus.com/bid/97996
CVE ID: CVE-2015-8286 State: PUBLISHED Published: 2016-02-18T02:00:00 Last Updated: 2024-08-06T08:13:31.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000. Additional Analyst Notes: - CVE Program Container: References: - http://www.forbes.com/sites/andygreenberg/2013/01/28/more-than-a-dozen-brands-of-security-camera-systems-vulnerable-to-hacker-hijacking/ - http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html - http://www.kb.cert.org/vuls/id/899080 - http://www.kb.cert.org/vuls/id/923388 - https://community
-dvr-insecurity.html - http://www.kb.cert.org/vuls/id/899080 - http://www.kb.cert.org/vuls/id/923388 - https://community.rapid7.com/community/metasploit/blog/2013/01/23/ray-sharp-cctv-dvr-password-retrieval-remote-root - http://seclists.org/bugtraq/2015/Jun/117
CVE ID: CVE-2015-8287 State: PUBLISHED Published: 2016-02-18T02:00:00 Last Updated: 2024-08-06T08:13:31.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/923388
CVE ID: CVE-2015-8288 State: PUBLISHED Published: 2016-06-20T01:00:00 Last Updated: 2024-08-06T08:13:32.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/778696 - http://kb.netgear.com/app/answers/detail/a_id/30560
CVE ID: CVE-2015-8289 State: PUBLISHED Published: 2016-06-20T01:00:00 Last Updated: 2024-08-06T08:13:32.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/778696 - http://kb.netgear.com/app/answers/detail/a_id/30490
CVE ID: CVE-2015-8290 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8291 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8292 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8293 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8294 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8295 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.