Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16953 State: PUBLISHED Published: 2017-12-01T17:00:00 Last Updated: 2024-08-05T20:43:59.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43188/ - http://packetstormsecurity.com/files/145121/ZTE-ZXDSL-831-Unauthorized-Configuration-Access-Bypass.html - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008762
CVE ID: CVE-2017-16955 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T20:43:59.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8962 - https://packetstormsecurity.com/files/145059/WordPress-In-Link-1.0-SQL-Injection.html
CVE ID: CVE-2017-16956 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T20:43:59.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b3log/symphony/issues/509
CVE ID: CVE-2017-16957 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T20:43:57.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function in /usr/lib/lua/luci/controller/admin/diagnostic.lua in uhttpd. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101968 - https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkDiagnosticAuthenticatedRCE.txt
CVE ID: CVE-2017-16958 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T20:43:57.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkBridgeAuthenticatedRCE.txt
CVE ID: CVE-2017-16959 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T20:43:57.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP header, related to the set_sysinfo and get_sysinfo functions in /usr/lib/lua/luci/controller/locale.lua in uhttpd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/coincoin7/Wireless-Router-Vulnerability/
tional Analyst Notes: - CVE Program Container: References: - https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkLocalePathDisclosure.txt
CVE ID: CVE-2017-16960 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T20:43:59.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt
CVE ID: CVE-2017-16961 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T20:43:57.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack uses an admin/trees/add/process request with a crafted _tags[] parameter that is mishandled in a later admin/ajax/dashboard/approve-change request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/323
CVE ID: CVE-2017-16962 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T20:43:57.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a crafted Outlook.com calendar (aka Hotmail Calendar) invitation, (3) e-mail granting access to a directory that has JavaScript in its name, (4) JavaScript in a note name, (5) JavaScript in a task name, or (6) HTML e-mail that is mishandled in the Inbox component. Additional Analyst Notes: - CVE Program Container: References: - https://
ail that is mishandled in the Inbox component. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145095/communigatepro-xss.txt - https://www.exploit-db.com/exploits/43177/
CVE ID: CVE-2017-16964 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16965 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16966 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16967 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16968 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16969 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16970 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16971 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16972 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16973 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16974 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16975 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16976 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16977 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16978 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16979 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16980 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16981 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16982 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16983 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16984 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16985 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16986 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16987 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16988 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16989 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16990 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16991 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16992 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16993 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2017-16994 State: PUBLISHED Published: 2017-11-27T19:00:00 Last Updated: 2024-08-05T20:43:57.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=1431 - https://usn.ubuntu.com/3617-3/ - https://www.exploit-db.com/exploits/43178/ - ht
/p/project-zero/issues/detail?id=1431 - https://usn.ubuntu.com/3617-3/ - https://www.exploit-db.com/exploits/43178/ - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2 - https://usn.ubuntu.com/3632-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c - https://access.redhat.com/errata/RHSA-2018:0502 - https://usn.ubuntu.com/3617-2/ - https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c - https://usn.ubuntu.com/3619-1/ - http://www.securityfocus.com/bid/101969
CVE ID: CVE-2017-16995 State: PUBLISHED Published: 2017-12-22T10:00:00 Last Updated: 2024-08-05T20:43:57.863Z Vendors: n/a Products: n/a Problem Types: incorrect sign extension Description: The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45058/ - https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f - https://usn.ubuntu.com/3619-2/ - https://bugs.chromium.org/p/project-zero/issues/de
e2c8c942780948091f8f2a4f32fce1ac6f - https://usn.ubuntu.com/3619-2/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=1454 - https://usn.ubuntu.com/3633-1/ - http://www.securityfocus.com/bid/102288 - https://www.exploit-db.com/exploits/44298/ - https://www.exploit-db.com/exploits/45010/ - https://www.debian.org/security/2017/dsa-4073 - https://usn.ubuntu.com/usn/usn-3523-2/ - http://openwall.com/lists/oss-security/2017/12/21/2 - https://usn.ubuntu.com/3619-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b94826
32fce1ac6f - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb
CVE ID: CVE-2017-16996 State: PUBLISHED Published: 2017-12-22T10:00:00 Last Updated: 2024-08-05T20:43:59.662Z Vendors: n/a Products: Linux kernel through 4.14.8 Problem Types: did not properly handle register truncation to a smaller size Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1454 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c1
tail?id=1454 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c19b200f958 - https://github.com/torvalds/linux/commit/0c17d1d2c61936401f4702e1846e2c19b200f958 - http://www.securityfocus.com/bid/102267 - http://openwall.com/lists/oss-security/2017/12/21/2
CVE ID: CVE-2017-16997 State: PUBLISHED Published: 2017-12-18T01:00:00 Last Updated: 2024-08-05T20:43:59.423Z Vendors: n/a Products: glibc 2.19 through 2.26 Problem Types: improper RPATH/RUNPATH validation Description: elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a priv
interpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22625 - http://www.securityfocus.com/bid/102228 - https://sourceware.org/ml/libc-alpha/2017-12/msg00528.html - https://bugs.debian.org/884615 - https://access.redhat.com/errata/RHSA-2018:3092 - https://access.redhat.com/errata/RHBA-2019:0327
CVE ID: CVE-2017-16998 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-16999 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17000 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17001 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17002 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17003 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17004 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17005 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17006 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17007 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17008 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17009 State: REJECTED Published: 2018-01-04T20:00:00 Last Updated: 2018-01-04T19:57:01 Description: No description available.
CVE ID: CVE-2017-17010 State: PUBLISHED Published: 2017-12-22T14:00:00 Last Updated: 2024-08-05T20:43:59.367Z Vendors: Sony Interactive Entertainment Inc. Products: Content Manager Assistant for PlayStation Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN95423049/index.html
CVE ID: CVE-2017-17020 State: PUBLISHED Published: 2018-05-01T16:00:00 Last Updated: 2024-08-05T20:43:59.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with firmware before 1.15.01, command injection in alphapd (binary responsible for running the camera's web server) allows remote authenticated attackers to execute code through sanitized /setSystemAdmin user input in the AdminID field being passed directly to a call to system. Additional Analyst Notes: - CVE Program Container: References: - https://www.fidusinfosec.com/dlink-dcs-5030l-remote
em. Additional Analyst Notes: - CVE Program Container: References: - https://www.fidusinfosec.com/dlink-dcs-5030l-remote-code-execution-cve-2017-17020/ - http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10084
CVE ID: CVE-2017-17023 State: PUBLISHED Published: 2019-04-09T17:13:22 Last Updated: 2024-08-05T20:43:59.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows a man-in-the-middle (MITM) or man-on-the-side (MOTS) attacker to execute arbitrary, malicious software on a target user's computer. This is related to SIC_V11.04-64.exe (Sophos), NCP_EntryCl_Windows_x86_1004_31799.exe (NCP), and nc
get user's computer. This is related to SIC_V11.04-64.exe (Sophos), NCP_EntryCl_Windows_x86_1004_31799.exe (NCP), and ncpmon.exe (both Sophos and NCP). The vulnerability exists because: (1) the VPN client requests update metadata over an insecure HTTP connection; and (2) the client software does not check if the software update is signed before running it. Additional Analyst Notes: - CVE Program Container: References: - https://www.ncp-e.com/en/resources/download-vpn-client/#c8680 - https://www.ncp-e.com/fileadmin/pdf/service_support/release_notes/NCP_Secure_Clients/NCP_Secure_Entry_Client/NCP_RN_Win_Secure_Entry_Client_11_14_r42039_en.pdf
CVE ID: CVE-2017-17027 State: PUBLISHED Published: 2017-12-21T15:00:00Z Last Updated: 2024-09-16T17:08:54.626Z Vendors: QNAP Products: QTS FTP service Problem Types: Buffer Overflow Description: A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040018 - https://www.qnap.com/zh-tw/security-advisory/nas-201712-15
CVE ID: CVE-2017-17028 State: PUBLISHED Published: 2017-12-21T15:00:00Z Last Updated: 2024-09-17T02:32:36.250Z Vendors: QNAP Products: QTS External Device function Problem Types: Buffer Overflow Description: A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040018 - https://www.qnap.com/zh-tw/security-advisory/nas-201712-15
CVE ID: CVE-2017-17029 State: PUBLISHED Published: 2017-12-21T15:00:00Z Last Updated: 2024-09-17T01:25:48.489Z Vendors: QNAP Products: QTS Login function Problem Types: Buffer Overflow Description: A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040018 - https://www.qnap.com/zh-tw/security-advisory/nas-201712-15
CVE ID: CVE-2017-17030 State: PUBLISHED Published: 2017-12-21T15:00:00Z Last Updated: 2024-09-16T17:44:12.396Z Vendors: QNAP Products: QTS Login function Problem Types: Buffer Overflow Description: A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040018 - https://www.qnap.com/zh-tw/security-advisory/nas-201712-15
CVE ID: CVE-2017-17031 State: PUBLISHED Published: 2017-12-21T15:00:00Z Last Updated: 2024-09-16T18:19:26.971Z Vendors: QNAP Products: QTS Password function Problem Types: Buffer Overflow Description: A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040018 - https://www.qnap.com/zh-tw/security-advisory/nas-201712-15
CVE ID: CVE-2017-17032 State: PUBLISHED Published: 2017-12-21T15:00:00Z Last Updated: 2024-09-16T19:20:45.194Z Vendors: QNAP Products: QTS Password function Problem Types: Buffer Overflow Description: A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040018 - https://www.qnap.com/zh-tw/security-advisory/nas-201712-15
CVE ID: CVE-2017-17033 State: PUBLISHED Published: 2017-12-21T15:00:00Z Last Updated: 2024-09-16T23:45:33.033Z Vendors: QNAP Products: QTS Notification function Problem Types: Buffer Overflow Description: A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040018 - https://www.qnap.com/zh-tw/security-advisory/nas-201712-15