Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15592 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-243.html - https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html - https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html - http://www.securityfocus.com/bid/101513 - https://www
tps://lists.debian.org/debian-lts-announce/2017/11/msg00027.html - http://www.securityfocus.com/bid/101513 - https://www.debian.org/security/2017/dsa-4050 - http://www.securityfocus.com/bid/102129 - https://support.citrix.com/article/CTX228867 - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1039568 - https://support.citrix.com/article/CTX230138
CVE ID: CVE-2017-15593 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html - https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html - https://www.debian.org/security/2017/dsa-4050 - https://support.citrix.com/article/CTX228867 - https://xenbits.xen.org/xsa/advisory-242.html - https://security.gentoo.o
https://support.citrix.com/article/CTX228867 - https://xenbits.xen.org/xsa/advisory-242.html - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1039568
CVE ID: CVE-2017-15594 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT settings are mishandled during CPU hotplugging. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html - https://xenbits.xen.org/xsa/advisory-244.html - https://www.debian.org/security/2017/dsa-4050 - https://support.citrix.com/article/CTX228867 - https://security.gentoo.org/glsa/201801-14 - ht
/security/2017/dsa-4050 - https://support.citrix.com/article/CTX228867 - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1039568
CVE ID: CVE-2017-15595 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html - https://xenbits.xen.org/xsa/advisory-240.html - https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html - https://www.debian.org/security/2017/dsa-4050 - htt
https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html - https://www.debian.org/security/2017/dsa-4050 - https://www.exploit-db.com/exploits/43014/ - https://support.citrix.com/article/CTX228867 - https://security.gentoo.org/glsa/201801-14
CVE ID: CVE-2017-15596 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3969 - https://xenbits.xen.org/xsa/advisory-235.html - http://www.securitytracker.com/id/1039568
CVE ID: CVE-2017-15597 State: PUBLISHED Published: 2017-10-30T14:00:00 Last Updated: 2024-08-05T19:57:27.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not match up with that assumption. When such a grant copy operation is being done on a grant of a dying domain, the assumption turns out wrong. A malicious guest administrator can cause hypervisor memory corruption, most likely resulting in host crash and a Denial of Service. Privilege escalation and information leaks cannot be ruled out
t likely resulting in host crash and a Denial of Service. Privilege escalation and information leaks cannot be ruled out. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-236.html - http://www.securityfocus.com/bid/101564 - http://www.openwall.com/lists/oss-security/2017/10/24/3 - https://www.debian.org/security/2017/dsa-4050 - https://support.citrix.com/article/CTX229057 - http://www.securitytracker.com/id/1039653 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
CVE ID: CVE-2017-15600 State: PUBLISHED Published: 2017-10-18T21:00:00 Last Updated: 2024-08-05T19:57:27.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00004.html - https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz - https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=1501695
CVE ID: CVE-2017-15601 State: PUBLISHED Published: 2017-10-18T21:00:00 Last Updated: 2024-08-05T19:57:27.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup. Additional Analyst Notes: - CVE Program Container: References: - https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz - https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html - http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00006.html
CVE ID: CVE-2017-15602 State: PUBLISHED Published: 2017-10-18T21:00:00 Last Updated: 2024-08-05T19:57:27.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00005.html - https://ftp.gnu.org/gnu/libextractor/libextractor-1.6.tar.gz - https://lists.debian.org/debian-lts-announce/2017/12/msg00000.html
CVE ID: CVE-2017-15607 State: PUBLISHED Published: 2017-12-01T08:00:00 Last Updated: 2024-08-05T19:57:27.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181. Additional Analyst Notes: - CVE Program Container: References: - https://inedo.myjetbrains.com/youtrack/issue/OT-181 - https://inedo.com/blog/otter-174-released
CVE ID: CVE-2017-15608 State: PUBLISHED Published: 2018-09-26T21:00:00 Last Updated: 2024-08-05T19:57:27.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings. Additional Analyst Notes: - CVE Program Container: References: - https://inedo.myjetbrains.com/youtrack/issue/PG-1118 - https://inedo.com/blog/proget-50-beta5-released
CVE ID: CVE-2017-15609 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T19:57:27.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/3868
CVE ID: CVE-2017-15610 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T19:57:27.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Octopus before 3.17.7. When the special Guest user account is granted the CertificateExportPrivateKey permission, and Guest Access is enabled for the Octopus Server, an attacker can sign in as the Guest account and export Certificates managed by Octopus, including the private key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/3869
CVE ID: CVE-2017-15611 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T19:57:27.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus before 3.17.7, an authenticated user who was explicitly granted the permission to invite new users (aka UserInvite) can invite users to teams with escalated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/3864
CVE ID: CVE-2017-15612 State: PUBLISHED Published: 2017-10-19T08:00:00 Last Updated: 2024-08-05T19:57:27.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lepture/mistune/pull/140
CVE ID: CVE-2017-15613 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15614 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15615 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15616 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the phddns.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15617 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the iface variable in the interface_wan.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15618 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15619 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15620 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmac_import.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15621 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15622 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15623 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp_server.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15624 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-authtype variable in the pptp_server.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15625 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15626 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptp_server.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15627 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15628 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_server.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15629 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15630 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15631 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp_client.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15632 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_server.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15633 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-ipgroup variable in the session_limits.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15634 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15635 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the max_conn variable in the session_limits.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE ID: CVE-2017-15636 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T19:57:27.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - http://www.securityfocus.com/archive/1/541655/100/0/threaded