rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-5602 
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5603 
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5621.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5604 
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5605 
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5606 
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Kernel Zones.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5607 
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to INFRA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5608 
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5609 
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5610 
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5611 
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5612 
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5613 
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5608.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5614 
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
Problem types: description: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products: vendor: Oracle
product: FLEXCUBE Private Banking
Published: 2017-01-27T22:01:00.000Z
CVE-2016-5615 
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Lynx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5618 
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.2.0.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5619 
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different vulnerability than CVE-2016-5620.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5620 
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different vulnerability than CVE-2016-5619.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5621 
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5603.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5622 
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5623 
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts).
Problem types: description: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products: vendor: Oracle
product: FLEXCUBE Private Banking
Published: 2017-01-27T22:01:00.000Z
CVE-2016-5624 
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5625 
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5626 
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5627 
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to Server: InnoDB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5628 
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: DML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5629 
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5630 
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5631 
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5632 
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5633 
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-8290.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5634 
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to RBR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5635 
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Security: Audit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-5636 
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T14:00:00.000Z
CVE-2016-5637 
The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image, related to a "type confusion" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T18:00:00.000Z
CVE-2016-5638 Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877 reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text
There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genie_ping.htm or genie_ping2.htm or genie_ping3.htm page without authentication. Once accessed, the page will be redirected to the aCongratulations2.htma page, which reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text.
Problem types: cwe_id: CWE-319
description: CWE-319
Affected products: vendor: Netgear
product: WNDR4500
Published: 2018-07-24T15:00:00.000Z
CVE-2016-5639 
Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-03T01:00:00.000Z
CVE-2016-5640 
Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-03T01:00:00.000Z
CVE-2016-5642 
Opmantek NMIS before 8.5.12G has XSS via SNMP.
Problem types: description: XSS
Affected products: vendor: n/a
product: Opmantek NMIS before 8.5.12G
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5645 
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-24T01:00:00.000Z
CVE-2016-5646 
An exploitable heap overflow vulnerability exists in the Compound Binary File Format (CBFF) parser functionality of Lexmark Perceptive Document Filters library. A specially crafted CBFF file can cause a code execution. An attacker can send a malformed file to trigger this vulnerability.
Problem types: description: heap buffer overflow
Affected products: vendor: Lexmark
product: Perceptive Document Filters
Published: 2017-01-06T21:00:00.000Z
CVE-2016-5647 
The igdkmd64 module in the Intel Graphics Driver through 15.33.42.435, 15.36.x through 15.36.30.4385, and 15.40.x through 15.40.4404 on Windows allows local users to cause a denial of service (crash) or gain privileges via a crafted D3DKMTEscape request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-13T18:00:00.000Z
CVE-2016-5648 
Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-08T20:00:00.000Z
CVE-2016-5649 Netgear DGN2200 and DGND3700 disclose the administrator password
A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text before it gets redirected to absw_vfysucc.cgia. An attacker can use this password to gain administrator access to the targeted router's web interface.
Problem types: cwe_id: CWE-319
description: CWE-319
Affected products: vendor: Netgear
product: DGN2200
vendor: Netgear
product: DGND3700
Published: 2018-07-24T15:00:00.000Z
CVE-2016-5650 
ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-24T01:00:00.000Z
CVE-2016-5652 
An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.
Problem types: description: heap buffer overflow
Affected products: vendor: LibTiff
product: LibTiff
Published: 2017-01-06T21:00:00.000Z
CVE-2016-5653 
Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-19T22:00:00.000Z
CVE-2016-5654 
Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-19T22:00:00.000Z
CVE-2016-5655 
Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-19T22:00:00.000Z
CVE-2016-5660 
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T18:00:00.000Z
CVE-2016-5661 
Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T18:00:00.000Z
CVE-2016-5662 
Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-26T19:00:00.000Z
CVE-2016-5663 
Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (1) code, (2) error, or (3) error_description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-26T19:00:00.000Z
CVE-2016-5664 
Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-26T19:00:00.000Z
CVE-2016-5666 
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-03T01:00:00.000Z
CVE-2016-5667 
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct request to a page other than index.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-03T01:00:00.000Z
CVE-2016-5668 
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change settings via a JSON API call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-03T01:00:00.000Z
CVE-2016-5669 
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an OpenSSL Test Certification Authority, which makes it easier for remote attackers to conduct man-in-the-middle attacks against HTTPS sessions by leveraging the certificate's trust relationship.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-03T01:00:00.000Z
CVE-2016-5670 
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-03T01:00:00.000Z
CVE-2016-5671 
Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote attackers to hijack the authentication of arbitrary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-03T01:00:00.000Z
CVE-2016-5672 
Intel Crosswalk before 19.49.514.5, 20.x before 20.50.533.11, 21.x before 21.51.546.0, and 22.x before 22.51.549.0 interprets a user's acceptance of one invalid X.509 certificate to mean that all invalid X.509 certificates should be accepted without prompting, which makes it easier for man-in-the-middle attackers to spoof SSL servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-01T01:00:00.000Z
CVE-2016-5673 
UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-25T21:00:00.000Z
CVE-2016-5674 
__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-31T15:00:00.000Z
CVE-2016-5675 
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-31T15:00:00.000Z
CVE-2016-5676 
cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-31T15:00:00.000Z