rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-12991 
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12992 
The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12993 
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12994 
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12995 
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12996 
The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12997 
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12998 
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12999 
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13000 
The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13001 
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13002 
The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13003 
The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13004 
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13005 
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13006 
The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13007 
The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13008 
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13009 
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13010 
The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13011 
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13012 
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13013 
The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13014 
The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13015 
The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13016 
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13017 
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13018 
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13019 
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13020 
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13021 
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13022 
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13023 
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13024 
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13025 
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13026 
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13027 
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13028 
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13029 
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13030 
The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13031 
The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13032 
The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13033 
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13034 
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13035 
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13036 
The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13037 
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13038 
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13039 
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13040 
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13041 
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13042 
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13043 
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13044 
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13045 
The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13046 
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13047 
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13048 
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13049 
The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13050 
The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13051 
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13052 
The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13053 
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13054 
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13055 
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-13056 
The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-27T17:00:00.000Z
CVE-2017-13058 
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13059 
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13060 
In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13061 
In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13062 
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13063 
GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13064 
GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13065 
GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13066 
GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T06:00:00.000Z
CVE-2017-13067 
QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251. A remote user does not require any privileges to successfully execute an attack.
Problem types: description: remote code execution
Affected products: vendor: QNAP
product: QTS Media Libary PRODUCT
Published: 2017-09-14T15:00:00.000Z
CVE-2017-13068 
QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack.
Problem types: description: SQL Injection in HelpDesk
Affected products: vendor: QNAP
product: QNAP Helpdesk APP
Published: 2017-10-06T17:00:00.000Z
CVE-2017-13069 
QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-06T18:00:00.000Z
CVE-2017-13070 
A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines.
Problem types: description: DLL Hijacking
Affected products: vendor: QNAP
product: Qsync for Windows (exe)
Published: 2017-12-11T16:00:00.000Z
CVE-2017-13071 
QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier.
Problem types: description: Command injection
Affected products: vendor: QNAP
product: Video Station
Published: 2017-11-22T17:00:00.000Z
CVE-2017-13072 
Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code.
Problem types: description: Cross-site scripting
Affected products: vendor: QNAP
product: App Center in QTS
Published: 2018-06-21T13:00:00.000Z
CVE-2017-13073 
Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.
Problem types: description: Cross-site scripting
Affected products: vendor: QNAP
product: Photo Station
Published: 2018-04-23T14:00:00.000Z
CVE-2017-13077 
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Problem types: description: n/a
Affected products: vendor: Wi-Fi Alliance
product: Wi-Fi Protected Access (WPA and WPA2)
Published: 2017-10-17T02:00:00.000Z
CVE-2017-13078 
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
Problem types: cwe_id: CWE-323
description: CWE-323: Reusing a Nonce, Key Pair in Encryption
Affected products: vendor: Wi-Fi Alliance
product: Wi-Fi Protected Access (WPA and WPA2)
Published: 2017-10-17T13:00:00.000Z
CVE-2017-13079 
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Problem types: cwe_id: CWE-323
description: CWE-323: Reusing a Nonce, Key Pair in Encryption
Affected products: vendor: Wi-Fi Alliance
product: Wi-Fi Protected Access (WPA and WPA2)
Published: 2017-10-17T13:00:00.000Z
CVE-2017-13080 
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
Problem types: cwe_id: CWE-323
description: CWE-323: Reusing a Nonce, Key Pair in Encryption
Affected products: vendor: Wi-Fi Alliance
product: Wi-Fi Protected Access (WPA and WPA2)
Published: 2017-10-17T13:00:00.000Z
CVE-2017-13081 
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Problem types: cwe_id: CWE-323
description: CWE-323: Reusing a Nonce, Key Pair in Encryption
Affected products: vendor: Wi-Fi Alliance
product: Wi-Fi Protected Access (WPA and WPA2)
Published: 2017-10-17T13:00:00.000Z
CVE-2017-13082 
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Problem types: cwe_id: CWE-323
description: CWE-323: Reusing a Nonce, Key Pair in Encryption
Affected products: vendor: Wi-Fi Alliance
product: Wi-Fi Protected Access (WPA and WPA2)
Published: 2017-10-17T13:00:00.000Z
CVE-2017-13083 
Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code
Problem types: cwe_id: CWE-295
description: CWE-295: Improper Certificate Validation
cwe_id: CWE-494
description: CWE-494: Download of Code Without Integrity Check
cwe_id: CWE-345
description: CWE-345: Insufficient Verification of Data Authenticity
cwe_id: CWE-347
description: CWE-347: Improper Verification of Cryptographic Signature
Affected products: vendor: Akeo Consulting
product: Rufus
Credits: lang: en
value: Reported by Will Dormann of the CERT/CC
Published: 2017-10-18T13:00:00.000Z