deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-12639
Published: 2020-05-04
Description: phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpList/phplist3/compare/3.5.2...3.5.3; https://www.phplist.org/newslist/phplist-3-5-3-release-notes/; https://github.com/phpList/phplist3/compare/3.5.2...3.5.3
CVE: CVE-2020-4209
Published: 2020-05-04
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to create arbitrary files on the system. IBM X-Force ID: 175019.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175019; https://www.ibm.com/support/pages/node/6116488; https://exchange.xforce.ibmcloud.com/vulnerabilities/175019
CVE: CVE-2020-8790
Published: 2020-05-04
Description: The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-521
References: https://github.com/fierceoj/ownklok; https://github.com/fierceoj/ownklok
CVE: CVE-2020-8791
Published: 2020-05-04
Description: The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote attackers to submit API requests using authenticated but unauthorized tokens, resulting in IDOR issues. A remote attacker can use their own token to make unauthorized API requests on behalf of arbitrary user IDs. Valid and current user IDs are trivial to guess because of the user ID assignment convention used by the app. A remote attacker could harvest email addresses, unsalted MD5 password hashes, owner-assigned lock names, and owner-assigned fingerprint names for any range of arbitrary user IDs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://github.com/fierceoj/ownklok; https://github.com/fierceoj/ownklok
CVE: CVE-2020-8792
Published: 2020-05-04
Description: The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Valid barcode inputs can be easily guessed because barcode strings follow a predictable pattern. Correctly guessed valid barcode inputs entered through the app interface disclose arbitrary users' email addresses and lock names.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: https://github.com/fierceoj/ownklok; https://github.com/fierceoj/ownklok
CVE: CVE-2018-21233
Published: 2020-05-04
Description: TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decode_bmp_op.cc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-001.md; https://github.com/tensorflow/tensorflow/commit/49f73c55d56edffebde4bca4a407ad69c1cae433; https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-001.md
CVE: CVE-2020-10933
Published: 2020-05-04
Description: An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-908
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4TNVTT66VPRMX5UZYSDGSVRXKKDDDU5/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.debian.org/security/2020/dsa-4721
CVE: CVE-2020-12111
Published: 2020-05-04
Description: Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/157533/TP-LINK-Cloud-Cameras-NCXXX-SetEncryptKey-Command-Injection.html; https://seclists.org/fulldisclosure/2020/May/4; https://www.tp-link.com/us/security
CVE: CVE-2020-12640
Published: 2020-05-04
Description: Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12640-PHP%20Local%20File%20Inclusion-Roundcube; https://github.com/roundcube/roundcubemail/commit/814eadb699e8576ce3a78f21e95bf69a7c7b3794
CVE: CVE-2020-12641
Published: 2020-05-04
Description: rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12641-Command%20Injection-Roundcube; https://github.com/roundcube/roundcubemail/commit/fcfb099477f353373c34c8a65c9035b06b364db3
CVE: CVE-2017-18753
Published: 2020-05-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-20734, CVE-2017-18864. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2019-20734 and CVE-2017-18864 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-18760
Published: 2020-05-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-20732, CVE-2017-18865. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2019-20732 and CVE-2017-18865 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-18771
Published: 2020-05-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-20738, CVE-2017-18866. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2019-20738 and CVE-2017-18866 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-18774
Published: 2020-05-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-21139, CVE-2017-18867. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2018-21139 and CVE-2017-18867 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-12109
Published: 2020-05-04
Description: Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/157531/TP-LINK-Cloud-Cameras-NCXXX-Bonjour-Command-Injection.html; http://packetstormsecurity.com/files/159222/TP-Link-Cloud-Cameras-NCXXX-Bonjour-Command-Injection.html; https://seclists.org/fulldisclosure/2020/May/2
CVE: CVE-2020-12642
Published: 2020-05-04
Description: An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://github.com/reportportal/reportportal/blob/master/SECURITY_ADVISORIES.md; https://github.com/reportportal/reportportal/blob/master/SECURITY_ADVISORIES.md
CVE: CVE-2020-1732
Published: 2020-05-04
Description: A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-284, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1732; https://github.com/wildfly-security/soteria/commit/c2479f8c39d7d661341fdcaff7f5e97c5eea1a54; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1732
CVE: CVE-2020-10618
Published: 2020-05-04
Description: LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.us-cert.gov/ics/advisories/icsa-20-119-01; https://www.us-cert.gov/ics/advisories/icsa-20-119-01
CVE: CVE-2020-10622
Published: 2020-05-04
Description: LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to arbitrary file creation by unauthorized users
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.us-cert.gov/ics/advisories/icsa-20-119-01; https://www.us-cert.gov/ics/advisories/icsa-20-119-01
CVE: CVE-2020-5331
Published: 2020-05-04
Description: RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session information could potentially be stored in cache or log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-598, CWE-200
References: https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2020-5332
Published: 2020-05-04
Description: RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability. AN authenticated malicious user with administrator privileges could potentially exploit this vulnerability to execute arbitrary commands on the system where the vulnerable application is deployed.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2020-5333
Published: 2020-05-04
Description: RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to view unauthorized information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2020-5334
Published: 2020-05-04
Description: RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2020-5335
Published: 2020-05-04
Description: RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to send arbitrary requests to the vulnerable application to perform server operations with the privileges of the authenticated victim user.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2020-5336
Published: 2020-05-04
Description: RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability. An unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious JavaScript code on the affected system.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-74
References: https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2020-5337
Published: 2020-05-04
Description: RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2020-5343
Published: 2020-05-04
Description: Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability. A local authenticated malicious user with low privileges could exploit this vulnerability to gain unauthorized access on the root folder.
CVSS Score: 7.3 (HIGH)
CWE: CWE-277, CWE-863
References: https://www.dell.com/support/article/SLN321036; https://www.dell.com/support/article/SLN321036
CVE: CVE-2020-8896
Published: 2020-05-04
Description: A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to hold it. Mitigation: Update to Google Earth Pro 7.3.3.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-119, CWE-120
References: https://support.google.com/earth/answer/40901; https://support.google.com/earth/answer/40901
CVE: CVE-2020-10686
Published: 2020-05-04
Description: A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-285
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10686; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10686
CVE: CVE-2020-10700
Published: 2020-05-04
Description: A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10700
CVE: CVE-2020-10717
Published: 2020-05-04
Description: A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version >= v5.0. Virtio-fs is meant to share a host file system directory with a guest via virtio-fs device. If the guest opens the maximum number of file descriptors under the shared directory, a denial of service may occur. This flaw allows a guest user/process to cause this denial of service on the host.
CVSS Score: 3.3 (LOW)
CWE: CWE-770, CWE-770
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10717; https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg00141.html; https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg00143.html
CVE: CVE-2020-12649
Published: 2020-05-05
Description: Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/sirdude/gurbalib/pull/38; https://github.com/sirdude/gurbalib/pull/38
CVE: CVE-2020-12652
Published: 2020-05-05
Description: The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.14; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=28d76df18f0ad5bcf5fa48510b225f0ed262a99b
CVE: CVE-2020-12654
Published: 2020-05-05
Description: An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; http://www.openwall.com/lists/oss-security/2020/05/08/2; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.4
CVE: CVE-2020-12653
Published: 2020-05-05
Description: An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; http://www.openwall.com/lists/oss-security/2020/05/08/2; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.4
CVE: CVE-2020-12655
Published: 2020-05-05
Description: An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d0c7feaf87678371c2c09b3709400be416b2dc62; https://github.com/torvalds/linux/commit/d0c7feaf87678371c2c09b3709400be416b2dc62
CVE: CVE-2020-12656
Published: 2020-05-05
Description: gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked, but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html; https://bugzilla.kernel.org/show_bug.cgi?id=206651
CVE: CVE-2020-12657
Published: 2020-05-05
Description: An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.5; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2f95fa5c955d0a9987ffdc3a095e2f4e62c5f2a9
CVE: CVE-2020-12659
Published: 2020-05-05
Description: An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; https://bugzilla.kernel.org/show_bug.cgi?id=207225; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7
CVE: CVE-2017-18864
Published: 2020-05-05
Description: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R6900P before 1.0.0.56, R7100LG before 1.0.0.32, R7300 before 1.0.0.54, R7900 before 1.0.1.18, R8300 before 1.0.2.104, and R8500 before 1.0.2.104.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://kb.netgear.com/000051495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Routers-PSV-2017-0791; https://kb.netgear.com/000051495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Routers-PSV-2017-0791
CVE: CVE-2017-18865
Published: 2020-05-05
Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://kb.netgear.com/000051485/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8300-and-R8500-PSV-2017-2228; https://kb.netgear.com/000051485/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8300-and-R8500-PSV-2017-2228
CVE: CVE-2017-18866
Published: 2020-05-05
Description: Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, WNDR4300v2 before 1.0.0.48, and WNR2000v5 before 1.0.0.58.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000051472/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Routers-PSV-2016-0100; https://kb.netgear.com/000051472/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Routers-PSV-2016-0100