Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14386 State: PUBLISHED Published: 2017-12-07T19:00:00 Last Updated: 2024-08-05T19:27:40.293Z Vendors: n/a Products: Dell 2335dn Firmware and Dell 2355DN Firmware Version V2.70.45.34, A10 and Version V2.70.06.26, A13 Problem Types: Cross-site scripting vulnerability Description: The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A13 and V2.70.45.34 A10 respectively, are affected by a cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website. Additional Analyst Notes
y HTML or JavaScript code in the user's browser session in the context of the affected website. Additional Analyst Notes: - CVE Program Container: References: - http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3 - http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=CG55V
CVE ID: CVE-2017-14387 State: PUBLISHED Published: 2017-12-20T23:00:00 Last Updated: 2024-08-05T19:27:40.832Z Vendors: n/a Products: EMC Isilon OneFS EMC Isilon OneFS 8.1.0.0, EMC Isilon OneFS 8.0.1.0 -- 8.0.1.1, EMC Isilon OneFS 8.0.0.0 8.0.0.4 Problem Types: NFS Export Security Setting Fallback Vulnerability Description: The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings (including the NFS export security flavor for authentication) that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly propagate changes made to the default security flavor to all new and existin
vice contained a flaw that did not properly propagate changes made to the default security flavor to all new and existing NFS exports that are configured to use default NFS export settings and that are mounted after those changes are made. This flaw may potentially allow NFS clients to access affected NFS exports using the default and potentially weaker security flavor even if a more secure one was selected to be used by the OneFS administrator, aka an "NFS Export Security Setting Fallback Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Dec/78 - http://www.securityfocus.com/bid/102292
CVE ID: CVE-2017-14388 State: PUBLISHED Published: 2017-11-13T17:00:00 Last Updated: 2024-08-05T19:27:40.238Z Vendors: n/a Products: GrootFS release GrootFS release 0.3.x versions prior to 0.30.0 Problem Types: Does not validate DiffIDs Description: Cloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the grootfs volume cache. For example, this could allow an attacker to provide an image layer that GrootFS would consider to be the Ubuntu base layer. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-14388/
CVE ID: CVE-2017-14389 State: PUBLISHED Published: 2017-11-28T07:00:00 Last Updated: 2024-08-05T19:27:40.603Z Vendors: n/a Products: Cloud Foundry capi-release: All versions prior to 1.45.0, cf-release: All versions prior to v280, cf-deployment: All versions prior to v1.0.0 Problem Types: Application Subdomain Takeover Description: An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to v1.0.0). The Cloud Controller does not prevent space developers from creating subdomains to an already existing route that belongs to a different user in a different org and space, aka an
m creating subdomains to an already existing route that belongs to a different user in a different org and space, aka an "Application Subdomain Takeover." Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-14389/
CVE ID: CVE-2017-14390 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T19:27:40.156Z Vendors: n/a Products: cf-deployment cf-deployment v0.35.0 Problem Types: syslog misconfiguration Description: In Cloud Foundry Foundation cf-deployment v0.35.0, a misconfiguration with Loggregator and syslog-drain causes logs to be drained to unintended locations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101972 - https://www.cloudfoundry.org/cve-2017-14390/
CVE ID: CVE-2017-14391 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-14392 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-14393 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-14394 State: PUBLISHED Published: 2019-06-19T21:22:20 Last Updated: 2024-08-05T19:27:40.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to perform phishing via an unvalidated redirect. Additional Analyst Notes: - CVE Program Container: References: - https://backstage.forgerock.com/knowledge/kb/article/a45958025
CVE ID: CVE-2017-14395 State: PUBLISHED Published: 2019-06-19T21:22:29 Last Updated: 2024-08-05T19:27:40.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to execute a script in the user's browser via reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://backstage.forgerock.com/knowledge/kb/article/a45958025
CVE ID: CVE-2017-14396 State: PUBLISHED Published: 2017-09-12T21:00:00 Last Updated: 2024-08-05T19:27:40.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osticket.com/blog/125
CVE ID: CVE-2017-14397 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-17T01:35:59.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://download.anydesk.com/changelog.txt
CVE ID: CVE-2017-14398 State: PUBLISHED Published: 2017-09-13T08:00:00 Last Updated: 2024-08-05T19:27:40.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to read and write to arbitrary memory locations, and consequently gain privileges, via a methodology involving a handle to \Device\PhysicalMemory, IOCTL 0x22A064, and ZwMapViewOfSection. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/FuzzySec/status/907722788219256832
CVE ID: CVE-2017-14399 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-17T04:00:27.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SPuerBRead/blackcat-cms-file-upload/blob/master/README.md
CVE ID: CVE-2017-14400 State: PUBLISHED Published: 2017-09-12T21:00:00 Last Updated: 2024-08-05T19:27:40.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which allows remote attackers to cause a denial of service (NULL pointer dereference in the function GetVirtualPixels in MagickCore/cache.c) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100865 - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/746 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.h
https://github.com/ImageMagick/ImageMagick/issues/746 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-14401 State: PUBLISHED Published: 2017-09-13T03:00:00 Last Updated: 2024-08-05T19:27:40.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT UPDATE" section. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/module_admin_user_add_modify_user.html
CVE ID: CVE-2017-14402 State: PUBLISHED Published: 2017-09-13T03:00:00 Last Updated: 2024-08-05T19:27:40.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT CREATION" section, related to lack of input validation in include/function.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/eonweb_include_function.html
CVE ID: CVE-2017-14403 State: PUBLISHED Published: 2017-09-13T03:00:00 Last Updated: 2024-08-05T19:27:40.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/eonweb_module_admin_group_search.html
CVE ID: CVE-2017-14404 State: PUBLISHED Published: 2017-09-13T03:00:00 Last Updated: 2024-08-05T19:27:40.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list parameter (aka the url_tool variable) to module/tool_all/select_tool.php, as demonstrated by a tool_list=php://filter/ substring. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/eonweb_module_tool_all_select_tool.html
CVE ID: CVE-2017-14405 State: PUBLISHED Published: 2017-09-13T03:00:00 Last Updated: 2024-08-05T19:27:40.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameter to module/admin_device/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.sstrunk.com/cve/eonweb_module_admin_device_index.html
CVE ID: CVE-2017-14406 State: PUBLISHED Published: 2017-09-13T03:00:00Z Last Updated: 2024-09-17T01:10:44.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/08/mp3gain-null-pointer-dereference-in-sync_buffer-mpglibdblinterface-c/
CVE ID: CVE-2017-14407 State: PUBLISHED Published: 2017-09-13T03:00:00Z Last Updated: 2024-09-16T21:57:32.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-filteryule-gain_analysis-c/
CVE ID: CVE-2017-14408 State: PUBLISHED Published: 2017-09-13T03:00:00Z Last Updated: 2024-09-17T04:14:17.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-dct36-mpglibdbllayer3-c/
CVE ID: CVE-2017-14409 State: PUBLISHED Published: 2017-09-13T03:00:00Z Last Updated: 2024-09-16T22:25:54.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/08/mp3gain-global-buffer-overflow-in-iii_dequantize_sample-mpglibdbllayer3-c/
CVE ID: CVE-2017-14410 State: PUBLISHED Published: 2017-09-13T03:00:00Z Last Updated: 2024-09-17T02:11:37.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/08/mp3gain-global-buffer-overflow-in-iii_i_stereo-mpglibdbllayer3-c/
CVE ID: CVE-2017-14411 State: PUBLISHED Published: 2017-09-13T03:00:00Z Last Updated: 2024-09-17T04:25:48.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-copy_mp-mpglibdblinterface-c/
CVE ID: CVE-2017-14412 State: PUBLISHED Published: 2017-09-13T03:00:00Z Last Updated: 2024-09-16T22:51:15.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a denial of service (segmentation fault and application crash) or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/08/mp3gain-invalid-memory-write-in-copy_mp-mpglibdblinterface-c/
CVE ID: CVE-2017-14413 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/wpsacts.php. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14414 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/shareport.php. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14415 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/sitesurvey.php. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14416 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/wandetect.php. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14417 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: register_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not require authentication, which can result in unintended enrollment in mydlink Cloud Services. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14418 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link NPAPI extension, as used in conjunction with D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices, sends the cleartext admin password over the Internet as part of interaction with mydlink Cloud Services. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14419 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, participates in mydlink Cloud Services by establishing a TCP relay service for HTTP, even though a TCP relay service for HTTPS is also established. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14420 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14421 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of wrgac25_dlink.2013gui_dir850l for the Alphanetworks account upon device reset, which allows remote attackers to obtain root access via a TELNET session. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14422 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different customers' installations, which allows remote attackers to defeat the HTTPS cryptographic protection mechanisms by leveraging knowledge of this key from another installation. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14423 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14424 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/passwd permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14425 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/etc/hnapasswd permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14426 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0644 /var/etc/shadow (aka the /etc/shadow symlink target) permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14427 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/storage_account_root permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE ID: CVE-2017-14428 State: PUBLISHED Published: 2017-09-13T17:00:00 Last Updated: 2024-08-05T19:27:40.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/hostapd* permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html