yahoo-inc/cve-impacts huggingface dataset:
CVE-2017-18437: cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).
Key phrases: execute code via forwarders (SEC-240)
CVE-2017-18438: cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242).
Key phrases: execute code via Encoding API calls (SEC-242
CVE-2017-18439: cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243).
Key phrases: execute code via an ImageManager_dimensions API call (
CVE-2017-18440: cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244).
Key phrases: execute traceroute via api2 (SEC-244)
CVE-2017-18441: cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).
Key phrases: redirect web traffic (SEC-245)
CVE-2017-18442: cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).
Key phrases: execute Cpanel::SPFUI API commands (SEC-246)
CVE-2017-18443: cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).
Key phrases: use SSH port forwarding (SEC-247)
CVE-2017-18444: cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).
Key phrases: execute SSH API commands (SEC-248)
CVE-2017-18445: cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).
CVE-2017-18446: cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250).
Key phrases: file-read and file-write operations, file read, file write
CVE-2017-18447: cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251).
Key phrases: execute code via the ClamScanner_getsocket API (SEC-251
CVE-2017-18448: cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252).
Key phrases: certain file-read operations via a Serverinfo_manpage, file read
CVE-2017-18449: cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254).
Key phrases: certain file-rename operations in the context
CVE-2017-18450: cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255).
Key phrases: certain file-chmod operations via /scripts/
CVE-2017-18451: cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257).
Key phrases: read a user's crontab file during a
CVE-2017-18452: cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).
Key phrases: code execution via Rails configuration files (SEC-259
CVE-2017-18453: cPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260).
CVE-2017-18454: cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).
Key phrases: stored XSS in the WHM cPAddons install interface, stored xss
CVE-2017-18455: In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).
Key phrases: addon domain conversion
CVE-2017-18456: cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).
Key phrases: self XSS in the WHM cPAddons showsecurity interface, self xss
CVE-2017-18457: cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).
Key phrases: allows arbitrary file, arbitrary file-read operations via WHM /styled/, arbitrary file read
CVE-2017-18458: cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).
Key phrases: file overwrite when renaming an account (SEC-219
CVE-2017-18459: cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220).
Key phrases: allows arbitrary code execution, arbitrary code execution during account modification (SEC-220
CVE-2017-18460: cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).
Key phrases: allows arbitrary code execution, arbitrary code execution during automatic SSL installation (
CVE-2017-18461: cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223).
Key phrases: does not preserve security policy questions across an
CVE-2017-18462: cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224).
Key phrases: bypass when IP based protection, day ban bypass, a CPHulk one-day ban bypass when
CVE-2017-18463: cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225).
Key phrases: code execution in the context of the root
CVE-2017-18464: cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226).
Key phrases: allows arbitrary file, arbitrary file-overwrite operations via the WHM
CVE-2017-18465: cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227).
CVE-2017-18466: cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228).
Key phrases: parked domains
CVE-2017-18467: cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229).
Key phrases: restricted resources because of a URL filtering error, url filtering error
CVE-2017-18468: cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232).
Key phrases: execute code via the Htaccess::setphppreference API (SEC-232
CVE-2017-18469: cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233).
Key phrases: execute code via an NVData_fetchinc API call (
CVE-2017-18470: cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).
CVE-2017-18471: cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197).
Key phrases: self XSS on the paper_lantern password-change, self xss
CVE-2017-18472: cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198).
Key phrases: reflected XSS in reset-password interfaces (, reflected xss
CVE-2017-18473: cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).
Key phrases: self XSS on the webmail Password and Security, self xss
CVE-2017-18474: cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).
Key phrases: allows arbitrary file, arbitrary file-read operations via Exim valiases, arbitrary file read
CVE-2017-18475: In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user (SEC-204).
Key phrases: incorrect user account
CVE-2017-18476: Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).
CVE-2017-18477: In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206).
CVE-2017-18478: In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions (SEC-207).
Key phrases: acl checks
CVE-2017-18479: In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).
Key phrases: unreserved e-mail address
CVE-2017-18480: cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210).
CVE-2017-18481: cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).
Key phrases: stored XSS in the WHM Account Suspension List, stored xss
CVE-2017-18482: cPanel before 62.0.4 allows resellers to use the WHM enqueue_transfer_item API for queueing non-rearrange modules (SEC-213).
Key phrases: use the WHM enqueue_transfer_item API for queueing non
CVE-2017-18483: ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID.
Key phrases: XSS via a crafted SSID, xss
CVE-2017-18484: Cognitoys Dino devices allow XSS via the SSID.
Key phrases: XSS via the SSID, xss
CVE-2017-18485: Cognitoys Dino devices allow profiles_add.html CSRF.
Key phrases: profiles_add.html CSRF, csrf
CVE-2017-18486: Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.
Key phrases: escalate privileges because of mishandling of the User, weak prng
CVE-2017-18487: The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18488: The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18489: The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.
Key phrases: xss
CVE-2017-18490: The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18491: The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18492: The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18493: The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18494: The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18495: The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.
Key phrases: xss
CVE-2017-18496: The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18497: The liveforms plugin before 3.4.0 for WordPress has XSS.
Key phrases: xss
CVE-2017-18498: The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
Key phrases: xss
CVE-2017-18499: The simple-membership plugin before 3.5.7 for WordPress has XSS.
Key phrases: xss
CVE-2017-18500: The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18501: The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18502: The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18503: The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.
Key phrases: xss
CVE-2017-18504: The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.
Key phrases: csrf
CVE-2017-18505: The twitter-plugin plugin before 2.55 for WordPress has XSS.
Key phrases: xss
CVE-2017-18506: The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
Key phrases: xss
CVE-2017-18507: The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.
Key phrases: xss
CVE-2017-18508: The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.
Key phrases: xss
CVE-2017-18509: An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.
Key phrases: execute arbitrary code
CVE-2017-18510: The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.
Key phrases: csrf
CVE-2017-18511: The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.
Key phrases: csrf
CVE-2017-18512: The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.
Key phrases: csrf
CVE-2017-18513: The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.
Key phrases: csrf protection mechanism
CVE-2017-18514: The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2017-18515: The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2017-18516: The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18517: The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18518: The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
Key phrases: xss issues
CVE-2017-18519: The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.
Key phrases: xss
CVE-2017-18520: The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.
Key phrases: xss
CVE-2017-18521: The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n.
Key phrases: csrf
CVE-2017-18522: The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
Key phrases: xss
CVE-2017-18523: The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
Key phrases: csrf
CVE-2017-18524: The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18525: The megamenu plugin before 2.4 for WordPress has XSS.
Key phrases: xss
CVE-2017-18526: The moreads-se plugin before 1.4.7 for WordPress has XSS.
Key phrases: xss
CVE-2017-18527: The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18528: The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18529: The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18530: The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18531: The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288.
Key phrases: xss
CVE-2017-18532: The realty plugin before 1.1.0 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18533: The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.
Key phrases: xss
CVE-2017-18534: The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.
Key phrases: xss
CVE-2017-18535: The smokesignal plugin before 1.2.7 for WordPress has XSS.
Key phrases: xss
CVE-2017-18536: The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
Key phrases: xss
CVE-2017-18537: The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18538: The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.
Key phrases: xss
CVE-2017-18539: The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.
Key phrases: xss
CVE-2017-18540: The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.
Key phrases: xss
CVE-2017-18541: The xo-security plugin before 1.5.3 for WordPress has XSS.
Key phrases: xss
CVE-2017-18542: The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18543: The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.
Key phrases: incorrect access control
CVE-2017-18544: The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.
Key phrases: admin-panel csrf
CVE-2017-18545: The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.
Key phrases: incorrect escaping
CVE-2017-18546: The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.
Key phrases: csrf
CVE-2017-18547: The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.
Key phrases: csrf
CVE-2017-18548: The note-press plugin before 0.1.2 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2017-18549: An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_send_raw_srb does not initialize the reply structure.
Key phrases: kernel stack memory
CVE-2017-18550: An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aac_get_hba_info does not initialize the hbainfo structure.
Key phrases: potential exposure
CVE-2017-18551: An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated.
Key phrases: out of bounds write
CVE-2017-18552: An issue was discovered in net/rds/af_rds.c in the Linux kernel before 4.11. There is an out of bounds write and read in the function rds_recv_track_latency.
Key phrases: out of bounds write and read
CVE-2017-18553: The ad-buttons plugin before 2.3.2 for WordPress has XSS.
Key phrases: xss
CVE-2017-18554: The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.
Key phrases: xss
CVE-2017-18555: The booking-sms plugin before 1.1.0 for WordPress has XSS.
Key phrases: xss
CVE-2017-18556: The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.
Key phrases: xss issues
CVE-2017-18557: The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18558: The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.
Key phrases: xss issues
CVE-2017-18559: The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18560: The content-audit plugin before 1.9.2 for WordPress has XSS.
Key phrases: xss
CVE-2017-18561: The embed-comment-images plugin before 0.6 for WordPress has XSS.
Key phrases: xss
CVE-2017-18562: The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18563: The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen.
Key phrases: xss
CVE-2017-18564: The sender plugin before 1.2.1 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18565: The updater plugin before 1.35 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18566: The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18567: The wp-all-import plugin before 3.4.6 for WordPress has XSS.
Key phrases: xss
CVE-2017-18568: The my-wp-translate plugin before 1.0.4 for WordPress has XSS.
Key phrases: xss
CVE-2017-18569: The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.
Key phrases: csrf
CVE-2017-18570: The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.
Key phrases: sql injection
CVE-2017-18571: The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316.
Key phrases: sql injection
CVE-2017-18572: The gnucommerce plugin before 1.4.2 for WordPress has XSS.
Key phrases: xss
CVE-2017-18573: The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2017-18574: The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.
Key phrases: html escaping
CVE-2017-18575: The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.
Key phrases: xss issues
CVE-2017-18576: The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation.
Key phrases: xss
CVE-2017-18577: The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.
Key phrases: xss
CVE-2017-18578: The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS.
Key phrases: xss
CVE-2017-18579: The corner-ad plugin before 1.0.8 for WordPress has XSS.
Key phrases: xss
CVE-2017-18580: The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.
Key phrases: remote code execution
CVE-2017-18581: The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list.
Key phrases: xss
CVE-2017-18582: The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18583: The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.
Key phrases: php object injection
CVE-2017-18584: The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action.
Key phrases: permissions check
CVE-2017-18585: The posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory traversal.
Key phrases: directory traversal
CVE-2017-18586: The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths.
Key phrases: directory traversal
CVE-2017-18587: An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers.
CVE-2017-18588: An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.
CVE-2017-18589: An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic.
Key phrases: large integers
CVE-2017-18590: The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18591: The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php.
Key phrases: xss
CVE-2017-18592: The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads.
Key phrases: file upload
CVE-2017-18593: The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file.
Key phrases: xss
CVE-2017-18594: nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \\n character to ssh-brute.nse or ssh-auth-methods.nse.
Key phrases: denial of service condition, double free
CVE-2017-18595: An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c.
Key phrases: double free
CVE-2017-18596: The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.
Key phrases: incorrect access control
CVE-2017-18597: The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter.
Key phrases: sql injection
CVE-2017-18598: The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.
Key phrases: xss
CVE-2017-18599: The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter.
Key phrases: xss
CVE-2017-18600: The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field.
Key phrases: xss
CVE-2017-18601: The examapp plugin 1.0 for WordPress has XSS via exam input text fields.
Key phrases: xss
CVE-2017-18602: The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp_UserResult id parameter.
Key phrases: sql injection
CVE-2017-18603: The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter.
Key phrases: xss
CVE-2017-18604: The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.
Key phrases: php object injection
CVE-2017-18605: The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection.
Key phrases: php object injection
CVE-2017-18606: The avada theme before 5.1.5 for WordPress has stored XSS.
Key phrases: xss
CVE-2017-18607: The avada theme before 5.1.5 for WordPress has CSRF.
Key phrases: csrf
CVE-2017-18608: The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues.
Key phrases: xss
CVE-2017-18609: The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.
Key phrases: xss
CVE-2017-18610: The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.
Key phrases: xss
CVE-2017-18611: The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.
Key phrases: xss
CVE-2017-18612: The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter.
Key phrases: xss
CVE-2017-18613: The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter.
Key phrases: xss
CVE-2017-18614: The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter.
Key phrases: sql injection
CVE-2017-18615: The kama-clic-counter plugin before 3.5.0 for WordPress has XSS.
Key phrases: xss
CVE-2017-18634: The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.
Key phrases: script injection
CVE-2017-18635: An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
Key phrases: inject arbitrary HTML, xss, arbitrary html
CVE-2017-18636: CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.
Key phrases: downloadDocument.jsp?command=download&pathAndName= directory traversal
CVE-2017-18638: send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource. The response to this SSRF request is encoded into an image file and then sent to an e-mail address that can be supplied by the attacker. Thus, an attacker can exfiltrate any information.
Key phrases: ssrf
CVE-2017-18639: Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parameter : Document Title, /Content/Images/LibraryImages/newsimages Parameter : Image Title, /Content/links Parameter : Link Title, /Content/links Parameter : Link Title, or /Content/Videos/LibraryVideos/default-video-library Parameter : Video Title.
Key phrases: XSS via /Pages Parameter : Page Title, xss
CVE-2017-18640: The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
Key phrases: CVE-2003-1564
CVE-2017-18641: In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.
Key phrases: cleartext http
CVE-2017-18642: Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse engineering, and replay attacks.
Key phrases: rgb parameters
CVE-2017-18643: An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is information disclosure of the kbase_context address of a GPU memory node. The Samsung ID is SVE-2017-8907 (December 2017).
Key phrases: information disclosure
CVE-2017-18644: An issue was discovered on Samsung mobile devices with L(5.1), M(6.x), and N(7.x) software. There is a muic_set_reg_sel heap-based buffer overflow during the reading of MUIC register values. The Samsung ID is SVE-2017-10011 (December 2017).
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2017-18645: An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets) software. There is a panel_lpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 (December 2017).
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2017-18646: An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 (December 2017).
Key phrases: bypass the password requirement
CVE-2017-18647: An issue was discovered on Samsung mobile devices with M(6,x) and N(7.0) software. The TA Scrypto v1.0 implementation in Secure Driver has a race condition with a resultant buffer overflow. The Samsung IDs are SVE-2017-8973, SVE-2017-8974, and SVE-2017-8975 (November 2017).
Key phrases: race condition, buffer overflow
CVE-2017-18648: An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 (November 2017).
Key phrases: arbitrary file read write operations
CVE-2017-18649: An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the "SamFAIL" issue. The Samsung ID is SVE-2017-10465 (November 2017).
Key phrases: samfail, root privilege, integrity
CVE-2017-18650: An issue was discovered on Samsung mobile devices with N(7.x) software. There is a WifiStateMachine IllegalArgumentException and reboot if a malformed wpa_supplicant.conf is read. The Samsung ID is SVE-2017-9828 (October 2017).
Key phrases: malformed wpa_supplicant.conf, reboot
CVE-2017-18651: An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is an Integer Overflow in process_M_SetTokenTUIPasswd during handling of a trusted application, leading to memory corruption. The Samsung IDs are SVE-2017-9008 and SVE-2017-9009 (October 2017).
Key phrases: integer overflow, memory corruption
CVE-2017-18652: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. SVoice allows arbitrary code execution by changing dynamic libraries. The Samsung ID is SVE-2017-9299 (September 2017).
Key phrases: allows arbitrary code execution, arbitrary code execution by changing dynamic libraries
CVE-2017-18653: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. The Email application allows attackers to send emails on behalf of any user via a broadcasted intent. The Samsung ID is SVE-2017-9357 (September 2017).
Key phrases: send emails on behalf of any user via, broadcasted intent
CVE-2017-18654: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0, 7.1) software. An unauthenticated attacker can register a new security certificate. The Samsung ID is SVE-2017-9659 (September 2017).
CVE-2017-18655: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a stack-based buffer overflow with resultant memory corruption in a trustlet. The Samsung IDs are SVE-2017-8889, SVE-2017-8891, and SVE-2017-8892 (August 2017).
Key phrases: stack-based buffer overflow, memory corruption, stack based buffer overflow
CVE-2017-18656: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer over-read in a trustlet. The Samsung ID is SVE-2017-8890 (August 2017).
Key phrases: buffer over-read, buffer over read
CVE-2017-18657: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 (August 2017).
Key phrases: arbitrary write
CVE-2017-18658: An issue was discovered on Samsung mobile devices with M(6.0) software. The multiwindow_facade API allows attackers to cause a NullPointerException and system halt via an attempted screen touch of a non-existing display. The Samsung ID is SVE-2017-9383 (August 2017).
Key phrases: cause a NullPointerException and system halt via an, multiwindow_facade api
CVE-2017-18659: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Attackers can crash system processes via a broadcast to AdaptiveDisplayColorService. The Samsung ID is SVE-2017-8290 (July 2017).
Key phrases: crash, broadcast, crash system
CVE-2017-18660: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer overflow in tlc_server. The Samsung ID is SVE-2017-8888 (July 2017).
Key phrases: buffer overflow
CVE-2017-18661: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer overflow in process_cipher_tdea. The Samsung ID is SVE-2017-8973 (July 2017).
Key phrases: buffer overflow
CVE-2017-18662: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Data outside of the rkp log buffer boundary is read, causing an information leak. The Samsung ID is SVE-2017-9109 (July 2017).
Key phrases: information leak
CVE-2017-18663: An issue was discovered on Samsung mobile devices with N(7.x) software. Because of missing Intent exception handling, system_server can have a NullPointerException with a crash of a system process. The Samsung IDs are SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, and SVE-2017-9126 (July 2017).
Key phrases: nullpointerexception, crash, crash system
CVE-2017-18664: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. There is a NULL pointer exception in PersonManager, causing memory corruption. The Samsung ID is SVE-2017-8286 (June 2017).
Key phrases: memory corruption
CVE-2017-18665: An issue was discovered on Samsung mobile devices with M(6.0) software. There is a NULL pointer exception in WifiService via adb-cmd, causing memory corruption. The Samsung ID is SVE-2017-8287 (June 2017).
Key phrases: memory corruption
CVE-2017-18666: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Applications can send arbitrary premium SMS messages. The Samsung ID is SVE-2017-8701 (June 2017).
Key phrases: send arbitrary premium SMS messages
CVE-2017-18667: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Attackers can prevent users from learning that SMS storage space has been exhausted. The Samsung ID is SVE-2017-8702 (June 2017).
Key phrases: sms storage space
CVE-2017-18668: An issue was discovered on Samsung mobile devices with M(6.0) software. Attackers can prevent users from making outbound calls and sending outbound text messages. The Samsung ID is SVE-2017-8706 (June 2017).
CVE-2017-18669: An issue was discovered on Samsung mobile devices with N(7.x) software. Persona has an unprotected API that allows launch of any activity with system privileges. The Samsung ID is SVE-2017-9000 (June 2017).
Key phrases: launch of any activity with system privileges, unprotected api
CVE-2017-18670: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. android.intent.action.SIOP_LEVEL_CHANGED allows a serializable intent reboot. The Samsung ID is SVE-2017-8363 (May 2017).
Key phrases: a serializable intent reboot
CVE-2017-18671: An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.x) software. Intents related to Wi-Fi have incorrect exception handling, leading to a crash of system processes. The Samsung ID is SVE-2017-8389 (May 2017).
Key phrases: crash, crash system
CVE-2017-18672: An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.x) software. Because of incorrect exception handling for Intents, a local attacker can force a reboot within framework.jar. The Samsung ID is SVE-2017-8390 (May 2017).
Key phrases: reboot
CVE-2017-18673: An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can disable the Location service on a locked device, making it impossible for the rightful owner to find a stolen device. The Samsung ID is SVE-2017-8524 (May 2017).
Key phrases: location service
CVE-2017-18674: An issue was discovered on Samsung mobile devices with N(7.0) software. The time service (aka Timaservice) allows a kernel panic. The Samsung ID is SVE-2017-8593 (May 2017).
Key phrases: a kernel panic
CVE-2017-18675: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) (Exynos7420 or Exynox8890 chipsets) software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 (April 2017).
Key phrases: uninitialized memory
CVE-2017-18676: An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm chipsets) software. There is an RKP kernel protection bypass (in which unwanted memory mappings may occur) because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 (April 2017).
Key phrases: bypass (in which unwanted memory mappings may occur, RKP kernel protection bypass, rkp kernel protection bypass
CVE-2017-18677: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Because of an unprotected Intent, an attacker can reset the configuration of certain applications. The Samsung ID is SVE-2016-7142 (April 2017).
Key phrases: unprotected intent
CVE-2017-18678: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. An attacker can crash system processes via a Serializable object because of missing exception handling. The Samsung IDs are SVE-2017-8109, SVE-2017-8110, SVE-2017-8115, SVE-2017-8118, and SVE-2017-8119 (April 2017).
Key phrases: crash, serializable object, crash system
CVE-2017-18679: An issue was discovered on Samsung mobile devices with M(6.0) software. SLocation can cause a system crash via a call to an API that is not implemented. The Samsung ID is SVE-2017-8285 (April 2017).
Key phrases: slocation, system crash
CVE-2017-18680: An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (tablets) software. The lockscreen interface allows Add User actions, leading to an unintended ability to access user data in external storage. The Samsung ID is SVE-2016-7797 (March 2017).
Key phrases: an unintended ability to access user data in
CVE-2017-18681: An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 (Qualcomm AP chipsets). There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 (March 2017).
Key phrases: buffer overflows
CVE-2017-18682: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Because of incorrect exception handling and an unprotected intent, AudioService can cause a system crash, The Samsung IDs are SVE-2017-8114, SVE-2017-8116, and SVE-2017-8117 (March 2017).
Key phrases: unprotected intent, crash
CVE-2017-18683: An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. SVoice allows Hare Hunting during application installation. The Samsung ID is SVE-2016-6942 (February 2017).
Key phrases: Hare Hunting during application installation, hare hunting
CVE-2017-18684: An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. SVoice allows provider seizure via an application that uses a custom provider. The Samsung ID is SVE-2016-6942 (February 2017).
Key phrases: provider seizure via an application that uses a
CVE-2017-18685: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. The InputMethod application can cause a system crash via a malformed serializable object in an Intent. The Samsung ID is SVE-2016-7123 (February 2017).
Key phrases: malformed serializable object, crash
CVE-2017-18686: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) software. Contact information can leak to a log file because of the broadcasting of an unprotected intent. The Samsung ID is SVE-2016-7180 (February 2017).
Key phrases: unprotected intent, information leak
CVE-2017-18687: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. An attacker can obtain the full pathnames of sdcard files by reading the system protected log upon reception of a certain intent. The Samsung ID is SVE-2016-7183 (January 2017).
Key phrases: obtain the full pathnames of sdcard files by reading, file read
CVE-2017-18688: An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.0) software. There is an information disclosure (of memory locations outside a buffer) via /dev/dsm_ctrl_dev. The Samsung ID is SVE-2016-7340 (January 2017).
Key phrases: information disclosure
CVE-2017-18689: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos5433, Exynos7420, or Exynos7870 chipsets) software. An attacker can bypass a ko (aka Kernel Module) signature by modifying the count of kernel modules. The Samsung ID is SVE-2016-7466 (January 2017).
Key phrases: bypass a ko (aka Kernel Module) signature
CVE-2017-18690: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) (Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets) software. There is a buffer overflow in the sensor hub. The Samsung ID is SVE-2016-7484 (January 2017).
Key phrases: buffer overflow
CVE-2017-18691: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos8890 chipsets) software. There are multiple Buffer Overflows in TSP sysfs cmd_store. The Samsung ID is SVE-2016-7500 (January 2017).
Key phrases: buffer overflows
CVE-2017-18692: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 chipsets) software. There is a race condition, with a resultant buffer overflow, in the sec_ts touchscreen sysfs interface. The Samsung ID is SVE-2016-7501 (January 2017).
Key phrases: race condition, buffer overflow
CVE-2017-18693: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 2017).
Key phrases: buffer overflow
CVE-2017-18694: An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect format specifier is used. The Samsung ID is SVE-2016-7551 (January 2017).
CVE-2017-18695: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Attackers (who control a certain subdomain) can discover a user's credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 (January 2017).
CVE-2017-18696: An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890, or MSM8996 chipsets) software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 (January 2017).
Key phrases: memory corruption, rkp
CVE-2017-18697: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.2.52.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2017-18698: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6100 before 1.0.1.20, R7800 before 1.0.2.40, and R9000 before 1.0.2.52.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2017-18699: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.2.52.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2017-18700: Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 before 1.0.3.29, EX6200 before 1.0.3.84, EX7000 before 1.0.0.60, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.56, R7900 before 1.0.1.26, R8000 before 1.0.4.4, R8300 before 1.0.2.106, R8500 before 1.0.2.106, R9000 before 1.0.2.52, WNDR3400v3 before 1.0.1.16, WNR3500Lv2 before 1.2.0.46, and WNDR3700v5 before 1.1.0.48.
Key phrases: stored xss
CVE-2017-18701: Certain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and R6900 before 1.0.1.34.
Key phrases: reflected xss
CVE-2017-18702: NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.
Key phrases: incorrect configuration of security settings
CVE-2017-18703: Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.18, R6020 before 1.0.0.26, R6050 before 1.0.1.16, R6080 before 1.0.0.26, R6100 before 1.0.1.20, R6220 before 1.1.0.60, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.40, WNDR3700v5 before 1.1.0.48, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.46, WNR2000v5 before 1.0.0.62, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.
Key phrases: csrf
CVE-2017-18704: Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R6900P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.56, R7900 before 1.0.1.26, R8000 before 1.0.4.4, R8500 before 1.0.2.106, R8300 before 1.0.2.106, and WNDR3400v3 before 1.0.1.16.
Key phrases: read arbitrary files
CVE-2017-18705: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62.
Key phrases: incorrect configuration of security settings
CVE-2017-18706: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.20, R7500 before 1.0.0.118, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62.
Key phrases: incorrect configuration of security settings
CVE-2017-18707: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106.
Key phrases: buffer overflow
CVE-2017-18708: Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.
Key phrases: csrf
CVE-2017-18709: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.
Key phrases: incorrect configuration of security settings
CVE-2017-18710: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106.
Key phrases: disclosure of sensitive information