Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10153 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-06T03:14:42.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging reliance on earlier net/ceph/crypto.c code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/21/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 - http://git.kernel.org/cgit/linux/
-security/2017/01/21/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a45f795c65b479b4ba107b6ccde29b896d51ee98 - http://www.securityfocus.com/bid/95713 - https://github.com/torvalds/linux/commit/a45f795c65b479b4ba107b6ccde29b896d51ee98 - https://bugzilla.redhat.com/show_bug.cgi?id=1416101
CVE ID: CVE-2016-10154 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-06T03:14:42.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95714 - http://www.openwall.com/lists/oss-security/2017/01/21/3 - http://www.kernel.org/pub/l
/www.securityfocus.com/bid/95714 - http://www.openwall.com/lists/oss-security/2017/01/21/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.1 - https://github.com/torvalds/linux/commit/06deeec77a5a689cc94b21a8a91a76e42176685d - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06deeec77a5a689cc94b21a8a91a76e42176685d - https://bugzilla.redhat.com/show_bug.cgi?id=1416104
CVE ID: CVE-2016-10155 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-06T03:14:42.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95770 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2017/01/21/4 - https://access.redhat.com/errata/RHSA-2017:2392 - http://git.q
http://www.openwall.com/lists/oss-security/2017/01/21/4 - https://access.redhat.com/errata/RHSA-2017:2392 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb7a20a3616085d46aa6b4b4224e15587ec67e6e - https://security.gentoo.org/glsa/201702-28 - http://www.openwall.com/lists/oss-security/2017/01/20/14 - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2016-10156 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-06T03:14:42.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0e - https://bugzilla.suse.com/show_bug.cgi?id=1020601 - http://www.securitytracker.com/id/1037686 - https://www.exploit-db.com/exploits/41171/ - http://www.securityf
=1020601 - http://www.securitytracker.com/id/1037686 - https://www.exploit-db.com/exploits/41171/ - http://www.securityfocus.com/bid/95790 - https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f
CVE ID: CVE-2016-10157 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-06T03:14:42.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai NetSession process space. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/140366/Akamai-NetSession-1.9.3.1-DLL-Hijacking.html - http://www.securityfocus.com/bid/95995
CVE ID: CVE-2016-10158 State: PUBLISHED Published: 2017-01-24T21:00:00 Last Updated: 2024-08-06T03:14:42.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (application crash) via crafted EXIF data that triggers an attempt to divide the minimum representable negative integer by -1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95764 - https://github.com/php/php-src/commit/1cda0d7c2ffb62d8331c64e703131d9cabdc03ea - https://bugs.php.net/bug.php?id=73737 - ht
ps://github.com/php/php-src/commit/1cda0d7c2ffb62d8331c64e703131d9cabdc03ea - https://bugs.php.net/bug.php?id=73737 - https://access.redhat.com/errata/RHSA-2018:1296 - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://www.tenable.com/security/tns-2017-04 - http://www.debian.org/security/2017/dsa-3783 - https://security.gentoo.org/glsa/201702-29 - http://php.net/ChangeLog-7.php - http://www.securitytracker.com/id/1037659
CVE ID: CVE-2016-10159 State: PUBLISHED Published: 2017-01-24T21:00:00 Last Updated: 2024-08-06T03:14:42.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/ca46d0acbce55019b970fcd4c1e8a10edfdded93 - https://access.redhat.com/errata/RHSA-2018:1296 - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/nta
ps://access.redhat.com/errata/RHSA-2018:1296 - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://www.tenable.com/security/tns-2017-04 - http://www.debian.org/security/2017/dsa-3783 - https://security.gentoo.org/glsa/201702-29 - http://php.net/ChangeLog-7.php - http://www.securityfocus.com/bid/95774 - http://www.securitytracker.com/id/1037659 - https://bugs.php.net/bug.php?id=73764
CVE ID: CVE-2016-10160 State: PUBLISHED Published: 2017-01-24T21:00:00 Last Updated: 2024-08-06T03:14:42.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=73768 - https://access.redhat.com/errata/RHSA-2018:1296 - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://
ta/RHSA-2018:1296 - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://github.com/php/php-src/commit/b28b8b2fee6dfa6fcd13305c581bb835689ac3be - https://www.tenable.com/security/tns-2017-04 - http://www.debian.org/security/2017/dsa-3783 - https://security.gentoo.org/glsa/201702-29 - http://php.net/ChangeLog-7.php - http://www.securitytracker.com/id/1037659 - http://www.securityfocus.com/bid/95783
CVE ID: CVE-2016-10161 State: PUBLISHED Published: 2017-01-24T21:00:00 Last Updated: 2024-08-06T03:14:42.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/16b3003ffc6393e250f069aa28a78dc5a2c064b2 - https://bugs.php.net/bug.php?id=73825 - https://access.redhat.com/errata/RHSA-2018:12
fc6393e250f069aa28a78dc5a2c064b2 - https://bugs.php.net/bug.php?id=73825 - https://access.redhat.com/errata/RHSA-2018:1296 - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/ntap-20180112-0001/ - https://www.tenable.com/security/tns-2017-04 - http://www.debian.org/security/2017/dsa-3783 - https://security.gentoo.org/glsa/201702-29 - http://php.net/ChangeLog-7.php - http://www.securitytracker.com/id/1037659 - http://www.securityfocus.com/bid/95768
CVE ID: CVE-2016-10162 State: PUBLISHED Published: 2017-01-24T21:00:00 Last Updated: 2024-08-06T03:14:42.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95668 - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1
bid/95668 - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/php/php-src/commit/8d2539fa0faf3f63e1d1e7635347c5b9e777d47b - http://php.net/ChangeLog-7.php - http://www.securitytracker.com/id/1037659 - https://bugs.php.net/bug.php?id=73831
CVE ID: CVE-2016-10163 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-06T03:14:42.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) by repeatedly creating a decode context. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201707-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - http://www.openwall.com/lists/oss-security/2017/01/24/2 - https://cgit.freedesktop.org/virglren
7-February/000145.html - http://www.openwall.com/lists/oss-security/2017/01/24/2 - https://cgit.freedesktop.org/virglrenderer/commit/?id=747a293ff6055203e529f083896b823e22523fe7 - http://www.openwall.com/lists/oss-security/2017/01/25/4 - http://www.securityfocus.com/bid/95784
CVE ID: CVE-2016-10164 State: PUBLISHED Published: 2017-02-01T15:00:00 Last Updated: 2024-08-06T03:14:42.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/25/7 - https://lists.freedesktop.org/archives/xorg/2016-Dece
ences: - http://www.openwall.com/lists/oss-security/2017/01/25/7 - https://lists.freedesktop.org/archives/xorg/2016-December/058537.html - http://www.openwall.com/lists/oss-security/2017/01/22/2 - http://www.securityfocus.com/bid/95785 - https://cgit.freedesktop.org/xorg/lib/libXpm/commit/?id=d1167418f0fd02a27f617ec5afd6db053afbe185 - https://access.redhat.com/errata/RHSA-2017:1865 - http://www.debian.org/security/2017/dsa-3772 - https://security.gentoo.org/glsa/201701-72
CVE ID: CVE-2016-10165 State: PUBLISHED Published: 2017-02-03T19:00:00 Last Updated: 2024-08-06T03:14:42.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3770-2/ - http://www.debian.org/security/2017/dsa-3774 - http://rhn.redhat.com/errata/RHSA-2016-2079.html - https://usn.ubuntu.com/3770-1/ - https://access.redhat.com/errata/RHSA-2017:3267 - https://access.r
HSA-2016-2079.html - https://usn.ubuntu.com/3770-1/ - https://access.redhat.com/errata/RHSA-2017:3267 - https://access.redhat.com/errata/RHSA-2017:3268 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://access.redhat.com/errata/RHSA-2017:3046 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00174.html - http://www.securityfocus.com/bid/95808 - http://www.securitytracker.com/id/1039596 - https://access.redhat.com/errata/RHSA-2017:3264 - http://www.openwall.com/lists/oss-security/2017/01/25/14 - https://access.redhat.com/errata/RHSA-2017:3453 - https://security.netapp.com/advisory/ntap-20171019-0001/ - http://www.openwall.com/lists/oss-security/2017/
-2017:3453 - https://security.netapp.com/advisory/ntap-20171019-0001/ - http://www.openwall.com/lists/oss-security/2017/01/23/1 - https://access.redhat.com/errata/RHSA-2017:2999 - https://github.com/mm2/Little-CMS/commit/5ca71a7bc18b6897ab21d815d15e218e204581e2 - http://rhn.redhat.com/errata/RHSA-2016-2658.html
CVE ID: CVE-2016-10166 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-06T03:14:42.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/26/1 - http://www.openwall.com/lists/oss-security/2017/01/28/6 - http://libgd.github.io/release-2.2.4.html - https://github.com/libgd/libgd/commit/60bfb401ad5a4a8ae995dcd36372fe15c71
- http://libgd.github.io/release-2.2.4.html - https://github.com/libgd/libgd/commit/60bfb401ad5a4a8ae995dcd36372fe15c71e1a35 - http://www.debian.org/security/2017/dsa-3777 - http://www.securityfocus.com/bid/95869 - https://access.redhat.com/errata/RHSA-2019:2519 - https://access.redhat.com/errata/RHSA-2019:3299
CVE ID: CVE-2016-10167 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-06T03:14:42.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libgd/libgd/commit/fe9ed49dafa993e3af96b6a5a589efeea9bfb36f - http://www.openwall.com/lists/oss-security/2017/01/26/1 - http://www.openwall.com/lists/oss-security/2017/01/28/6 - https://access.redhat.com/errata/RHSA-2018:1296 - http://libgd.github
www.openwall.com/lists/oss-security/2017/01/28/6 - https://access.redhat.com/errata/RHSA-2018:1296 - http://libgd.github.io/release-2.2.4.html - https://www.tenable.com/security/tns-2017-04 - http://www.debian.org/security/2017/dsa-3777 - http://www.securityfocus.com/bid/95869 - http://www.securitytracker.com/id/1037659 - https://access.redhat.com/errata/RHSA-2017:3221
CVE ID: CVE-2016-10168 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-06T03:14:42.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/26/1 - http://www.openwall.com/lists/oss-security/2017/01/28/6 - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/libgd/libgd/commit/69d2fd2c597ffc0c217de1238b9bf4d4bceba8e6 - http://l
at.com/errata/RHSA-2018:1296 - https://github.com/libgd/libgd/commit/69d2fd2c597ffc0c217de1238b9bf4d4bceba8e6 - http://libgd.github.io/release-2.2.4.html - https://github.com/libgd/libgd/issues/354 - http://www.debian.org/security/2017/dsa-3777 - http://www.securityfocus.com/bid/95869 - http://www.securitytracker.com/id/1037659 - https://access.redhat.com/errata/RHSA-2017:3221
CVE ID: CVE-2016-10169 State: PUBLISHED Published: 2017-03-14T14:00:00 Last Updated: 2024-08-06T03:14:42.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95883 - https://sourceforge.net/p/wavpack/mailman/message/35557889/ - http://www.openwall.com/lists/oss-security/2017/01/28/9 - https://usn.ubuntu.com/3568-1/ - https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
CVE ID: CVE-2016-10170 State: PUBLISHED Published: 2017-03-14T14:00:00 Last Updated: 2024-08-06T03:14:42.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/wavpack/mailman/message/35561921/ - http://www.securityfocus.com/bid/95883 - http://www.openwall.com/lists/oss-security/2017/01/28/9 - https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
CVE ID: CVE-2016-10171 State: PUBLISHED Published: 2017-03-14T14:00:00 Last Updated: 2024-08-06T03:14:42.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/wavpack/mailman/message/35561939/ - http://www.securityfocus.com/bid/95883 - http://www.openwall.com/lists/oss-security/2017/01/28/9 - https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
CVE ID: CVE-2016-10172 State: PUBLISHED Published: 2017-03-14T14:00:00 Last Updated: 2024-08-06T03:14:42.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95883 - https://sourceforge.net/p/wavpack/mailman/message/35561951/ - http://www.openwall.com/lists/oss-security/2017/01/28/9 - https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
CVE ID: CVE-2016-10173 State: PUBLISHED Published: 2017-02-01T15:00:00 Last Updated: 2024-08-06T03:14:42.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/24/7 - https://security.gentoo.org/glsa/201702-32 - http://www.securityfocus.com/bid/95874 - https://github.com/halostatue/minitar/issues/16 - http://www.openwall.com/lists/oss-security/2017/01/29/1 - http://www.debi
ps://github.com/halostatue/minitar/issues/16 - http://www.openwall.com/lists/oss-security/2017/01/29/1 - http://www.debian.org/security/2017/dsa-3778 - https://puppet.com/security/cve/cve-2016-10173 - https://github.com/halostatue/minitar/commit/e25205ecbb6277ae8a3df1e6a306d7ed4458b6e4
CVE ID: CVE-2016-10174 State: PUBLISHED Published: 2017-01-30T04:24:00.000Z Last Updated: 2025-10-21T23:55:46.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2016/Dec/72 - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt - http://www.securityfocus.com/bid/95867 - https://www.exploi
ntent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt - http://www.securityfocus.com/bid/95867 - https://www.exploit-db.com/exploits/41719/ - http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability - https://www.exploit-db.com/exploits/40949/
CVE ID: CVE-2016-10175 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Dec/72 - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt
sts.org/fulldisclosure/2016/Dec/72 - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt - http://www.securityfocus.com/bid/95867 - http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability - https://www.exploit-db.com/exploits/40949/
CVE ID: CVE-2016-10176 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code executio
to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Dec/72 - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt - http://www.securityfocus.com/bid/95867 - http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability - https://www.exploit-db.com/exploits/40949/