rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-10830 
Untrusted search path vulnerability in Security Setup Tool all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION
product: Security Setup Tool
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10831 
Untrusted search path vulnerability in The electronic authentication system based on the commercial registration system "The CRCA user's Software" Ver1.8 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10832 
"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: NIPPON ANTENNA Co., Ltd
product: "Dokodemo eye Smart HD" SCR02HD
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10833 
"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: NIPPON ANTENNA Co., Ltd
product: "Dokodemo eye Smart HD" SCR02HD
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10834 
Directory traversal vulnerability in "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: NIPPON ANTENNA Co., Ltd
product: "Dokodemo eye Smart HD" SCR02HD
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10835 
"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to conduct code injection attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10836 
Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: OPTiM Corporation
product: Optimal Guard
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10837 
Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: BackupGuard
product: BackupGuard
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10838 
Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: SEO Panel
product: SEO Panel
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10839 
SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: SEO Panel
product: SEO Panel
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10840 
Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: k5n.us
product: WebCalendar
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10841 
Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: k5n.us
product: WebCalendar
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10842 
SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10843 
baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form.
Problem types: description: Arbitrary File Deletion
Affected products: vendor: baserCMS Users Community
product: baserCMS
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10844 
baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T20:00:00.000Z
CVE-2017-10845 
Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account.
Problem types: cwe_id: CWE-255
description: Credential Management (CWE-255)
Affected products: vendor: NTT DOCOMO, INC.
product: Wi-Fi STATION L-02F
Published: 2017-09-15T17:00:00.000Z
CVE-2017-10846 
Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: NTT DOCOMO, INC.
product: Wi-Fi STATION L-02F
Published: 2017-09-15T17:00:00.000Z
CVE-2017-10848 
Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Fuji Xerox Co.,Ltd.
product: Installer for DocuWorks
vendor: Fuji Xerox Co.,Ltd.
product: Installer for DocuWorks Viewer Light
Published: 2017-09-01T14:00:00.000Z
CVE-2017-10849 
Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Fuji Xerox Co.,Ltd.
product: Self-extracting document generated by DocuWorks
Published: 2017-09-01T14:00:00.000Z
CVE-2017-10850 
Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Fuji Xerox Co.,Ltd.
product: Installer of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of ART EX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of XPS Print Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of ART EX Direct FAX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271
vendor: Fuji Xerox Co.,Ltd.
product: Installer of Setting Restore Tool for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271
Published: 2017-09-01T14:00:00.000Z
CVE-2017-10851 
Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Fuji Xerox Co.,Ltd.
product: Installer for ContentsBridge Utility for Windows
Published: 2017-09-01T14:00:00.000Z
CVE-2017-10852 
Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: Corega Inc
product: CG-WGR1200
Published: 2018-03-09T16:00:00.000Z
CVE-2017-10853 
Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: Corega Inc
product: CG-WGR1200
Published: 2018-03-09T16:00:00.000Z
CVE-2017-10854 
Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: Corega Inc
product: CG-WGR1200
Published: 2018-03-09T16:00:00.000Z
CVE-2017-10855 
Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: FUJITSU LIMITED
product: FENCE-Explorer for Windows
Published: 2017-09-15T17:00:00.000Z
CVE-2017-10856 
SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Internet Initiative Japan Inc.
product: SEIL/X
vendor: Internet Initiative Japan Inc.
product: SEIL/B1
vendor: Internet Initiative Japan Inc.
product: SEIL/x86
vendor: Internet Initiative Japan Inc.
product: SEIL/BPV4
Published: 2017-09-15T17:00:00.000Z
CVE-2017-10857 
Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Office
Published: 2017-10-12T14:00:00.000Z
CVE-2017-10858 
Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Digital Arts Inc.
product: "i-filter 6.0 install program"
Published: 2017-09-15T17:00:00.000Z
CVE-2017-10859 
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Digital Arts Inc.
product: "i-filter 6.0 installer"
Published: 2017-09-15T17:00:00.000Z
CVE-2017-10860 
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Digital Arts Inc.
product: "i-filter 6.0 installer"
Published: 2017-09-15T17:00:00.000Z
CVE-2017-10861 
Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command.
Problem types: description: Directory traversal
Affected products: vendor: QualitySoft Corporation
product: QND Advance/Standard
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10862 
jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.
Problem types: description: Improper verification of signatures
Affected products: vendor: reallyl IO
product: jwt-scala
Published: 2017-10-12T14:00:00.000Z
CVE-2017-10863 
Untrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50.0.5 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Note this is a separate vulnerability from CVE-2017-10865.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Hitachi Solutions, Ltd.
product: HIBUN Confidential File Decryption program
Published: 2017-10-12T14:00:00.000Z
CVE-2017-10864 
Untrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20.0001 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Hitachi Solutions, Ltd.
product: Installer of HIBUN Confidential File Viewer
Published: 2017-10-12T14:00:00.000Z
CVE-2017-10865 
Untrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50.0.5 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Note this is a separate vulnerability from CVE-2017-10863.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Hitachi Solutions, Ltd.
product: HIBUN Confidential File Decryption program
Published: 2017-10-12T14:00:00.000Z
CVE-2017-10868 
H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Kazuho Oku
product: H2O
Published: 2017-12-22T14:00:00.000Z
CVE-2017-10869 
Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: Kazuho Oku
product: H2O
Published: 2017-12-22T14:00:00.000Z
CVE-2017-10870 
Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file.
Problem types: description: Memory Corrution vulnerability
Affected products: vendor: Justsystem
product: Rakuraku Hagaki
vendor: Justsystem
product: Rakuraku Hagaki Select for Ichitaro
Published: 2017-11-02T15:00:00.000Z
CVE-2017-10871 
Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary code via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: NTT DOCOMO, INC.
product: Wi-Fi STATION L-02F Software
Published: 2017-11-13T14:00:00.000Z
CVE-2017-10872 
H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Kazuho Oku
product: H2O
Published: 2017-12-22T14:00:00.000Z
CVE-2017-10873 
OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider.
Problem types: description: Authentication bypass
Affected products: vendor: Open Source Solution Technology Corporation
product: OpenAM
Published: 2017-11-02T15:00:00.000Z
CVE-2017-10874 
PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning attacks.
Problem types: description: Use of Insufficiently Random Values
Affected products: vendor: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
product: PWR-Q200
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10875 
I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.
Problem types: description: Denial-of-Service (DoS)
Affected products: vendor: I-O DATA DEVICE, INC.
product: LAN DISK Connect
Published: 2017-11-13T14:00:00.000Z
CVE-2017-10885 
Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: SBI SECURITIES Co.,Ltd.
product: HYPER SBI
Published: 2017-11-13T14:00:00.000Z
CVE-2017-10886 
Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Frogman Office Inc.
product: CS-Cart Japanese Edition
vendor: Frogman Office Inc.
product: CS-Cart Multivendor Japanese Edition
Published: 2017-11-17T14:00:00.000Z
CVE-2017-10887 
Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: BOOK WALKER Co.,Ltd.
product: BOOK WALKER for Windows
Published: 2017-11-17T14:00:00.000Z
CVE-2017-10888 
BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspecified vectors.
Problem types: description: Information Disclosure
Affected products: vendor: BOOK WALKER Co.,Ltd.
product: BOOK WALKER for Windows
vendor: BOOK WALKER Co.,Ltd.
product: BOOK WALKER for Mac
Published: 2017-11-17T14:00:00.000Z
CVE-2017-10889 
TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.
Problem types: description: XML external entities (XXE)
Affected products: vendor: tablepress.org
product: TablePress
Published: 2017-11-17T14:00:00.000Z
CVE-2017-10890 
Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on the same LAN to perform arbitrary operations or access information via unspecified vectors.
Problem types: description: Session Management Issue
Affected products: vendor: Sharp Corporation
product: RX-V200 firmware
vendor: Sharp Corporation
product: RX-V100 firmware
vendor: Sharp Corporation
product: RX-CLV1-P firmware
vendor: Sharp Corporation
product: RX-CLV2-B firmware
vendor: Sharp Corporation
product: RX-CLV3-N firmware
Published: 2017-11-17T14:00:00.000Z
CVE-2017-10891 
Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sony Video & Sound Products Inc.
product: Media Go
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10892 
Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sony Video & Sound Products Inc.
product: Music Center for PC
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10893 
Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Japan Agency for Local Authority Information Systems
product: The Public Certification Service for Individuals "The JPKI user's software"
Published: 2017-12-08T15:00:00.000Z
CVE-2017-10894 
StreamRelay.NET.exe ver2.14.0.7 and earlier allows remote attackers to cause a denial of service via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Tomoki Sanaki
product: StreamRelay.NET.exe
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10895 
sDNSProxy.exe ver1.1.0.0 and earlier allows remote attackers to cause a denial of service via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Tomoki Sanaki
product: sDNSProxy.exe
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10896 
Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: BUFFALO INC.
product: BBR-4HG
vendor: BUFFALO INC.
product: BBR-4MG
Published: 2017-12-08T15:00:00.000Z
CVE-2017-10897 
Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors.
Problem types: description: Improper Input Validation
Affected products: vendor: BUFFALO INC.
product: BBR-4HG
vendor: BUFFALO INC.
product: BBR-4MG
Published: 2017-12-08T15:00:00.000Z
CVE-2017-10898 
SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Princeton Ltd.
product: A-Member
vendor: Princeton Ltd.
product: A-Member for MT cloud
Published: 2017-12-01T14:00:00.000Z
CVE-2017-10899 
SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Princeton Ltd.
product: A-Reserve
vendor: Princeton Ltd.
product: A-Reserve for MT cloud
Published: 2017-12-01T14:00:00.000Z