15 matches found
Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-17031)
A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. This plugin only works with Tenable.ot. Please visit...
Siretta QUARTZ-GOLD buffer overflow vulnerability (CNVD-2023-17031)
The Siretta QUARTZ-GOLD is a high-speed industrial router from Siretta. A buffer overflow vulnerability exists in the Siretta QUARTZ-GOLD G5.0.1.5-210720-141020 version that can be exploited by an attacker to execute arbitrary commands...
CVE-2020-17031
creationtimestamp| type| source ---|---|--- 2020-11-11 12:34:56+00:00| seen| https://t.me/cibsecurity/16144...
CVE-2020-17031
Windows Remote Access Elevation of Privilege Vulnerability...
CVE-2020-17031
Technical details about CVE-2020-17031 (Windows remote access elevation of privilege) are not provided in the connected documents; public information in the initial description is limited. Monitor for updates.
CVE-2020-17031 Windows Remote Access Elevation of Privilege Vulnerability
...
KB4586786: Windows 10 Version 1903 and Windows 10 Version 1909 November 2020 Security Update
The Windows installation on the remote host is missing security update 4586781. It is, therefore, affected by multiple vulnerabilities. Please review the vendor advisory for more details. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from t...
KB4586823: Windows 8.1 and Windows Server 2012 R2 November 2020 Security Update
The Windows installation on the remote host is missing security update 4586781. It is, therefore, affected by multiple vulnerabilities. Please review the vendor advisory for more details. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from t...
KB4586830: Windows 10 Version 1607 and Windows Server 2016 November 2020 Security Update
The Microsoft 4586830 Product is missing security updates. - Remote Desktop Protocol Server Information Disclosure Vulnerability CVE-2020-16997 - DirectX Elevation of Privilege Vulnerability CVE-2020-16998 - Windows WalletService Information Disclosure Vulnerability CVE-2020-16999 - Remote Deskto...
CVE-2019-17031
CVE-2019-17031 entry is rejected and not used; it does not represent an active vulnerability entry.
CVE-2018-17031
CVE-2018-17031 affects Gogs 0.11.53 where a crafted .eml file can trigger MIME-type sniffing, causing XSS. The root cause is the absence of the X-Content-Type-Options: nosniff header, enabling the browser to sniff MIME types and execute injected scripts. This is supported by multiple connected en...
Pre-auth Remote Code Execution exploit for QNAP QTS
!/usr/bin/env python -- coding: iso-8859-15 -- Pre-auth Remote Code Execution exploit for QNAP QTS 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 2017111 Just a quick dirty RCE PoC to make your QNAP sing "XMAS" in morse. Author: Andrea Palazzo @cogitoergor00t E-mail:...
CVE-2017-17031
CVE-2017-17031 affects QNAP QTS. A pre-auth, remote code execution flaw exists due to a stack-based buffer overflow in the change_password.cgi path, caused by improper handling of the OLD_PASSWORD parameter. Affected are QTS 4.2.6 (build 20171026), 4.3.3.0378 (build 20171117), 4.3.4.0387 Beta 2 (...
QNAP QTS < 4.2.6 build 20171208, 4.3.3.x < 4.3.3.0396 build 20171205, 4.3.4.x < 4.3.4.0411 build 20171208 Multiple Vulnerabilities
QNAP QTS is vulnerable to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...