Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3947 State: PUBLISHED Published: 2016-04-07T18:00:00 Last Updated: 2024-08-06T00:10:31.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14015.patch - https://security.gentoo.org/glsa/201607-01 - http://lists.opensuse.org/opensuse-secur
changesets/squid-3.5-14015.patch - https://security.gentoo.org/glsa/201607-01 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11839.patch - http://www.squid-cache.org/Advisories/SQUID-2016_3.txt - http://www.ubuntu.com/usn/USN-2995-1 - http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10495.patch - http://www.securitytracker.com/id/1035457 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.squid-cache.org/Versions/v3/3.4/changesets/squid-3.4-13232.patch - http://www.squid-cache.or
/msg00040.html - http://www.squid-cache.org/Versions/v3/3.4/changesets/squid-3.4-13232.patch - http://www.squid-cache.org/Versions/v3/3.3/changesets/squid-3.3-12694.patch
CVE ID: CVE-2016-3948 State: PUBLISHED Published: 2016-04-07T18:00:00 Last Updated: 2024-08-06T00:10:31.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3557-1/ - https://security.gentoo.org/glsa/201607-01 - http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14016.patch - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://rhn.redhat.com/errata/RHSA-2016-2
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://rhn.redhat.com/errata/RHSA-2016-2600.html - http://www.securitytracker.com/id/1035458 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.squid-cache.org/Advisories/SQUID-2016_4.txt
CVE ID: CVE-2016-3949 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T00:10:31.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service (defect-mode transition) via crafted (1) ISO-TSAP or (2) Profibus packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-818183.pdf - http://www.securitytracker.com/id/1036089 - https://ics-cert.us-cert.gov/advisories/ICSA-16-161-01 - h
_ssa-818183.pdf - http://www.securitytracker.com/id/1036089 - https://ics-cert.us-cert.gov/advisories/ICSA-16-161-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-818183.pdf
CVE ID: CVE-2016-3950 State: PUBLISHED Published: 2016-04-18T14:00:00 Last Updated: 2024-08-06T00:10:31.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei AR3200 routers with software before V200R006C10SPC300 allow remote authenticated users to cause a denial of service (restart) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160406-01-ar-en
CVE ID: CVE-2016-3951 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T00:10:31.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.ubuntu.com/usn/USN-3004-1 - http://www.ubuntu.com/usn/USN-3001-1 - https://github.com/torvalds/linux/commit/4d0
tp://www.ubuntu.com/usn/USN-3004-1 - http://www.ubuntu.com/usn/USN-3001-1 - https://github.com/torvalds/linux/commit/4d06dd537f95683aba3651098ae288b7cbff8274 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - https://bugzilla.redhat.com/show_bug.cgi?id=1324782 - http://www.ubuntu.com/usn/USN-3021-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1666984c8625b3db19a9abc298931d35ab7bc64b - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-3000-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.securityfocus.com/bid/91028 - http://www.securitytracker.com/id/1036763 - http:
.org/security/2016/dsa-3607 - http://www.securityfocus.com/bid/91028 - http://www.securitytracker.com/id/1036763 - http://www.ubuntu.com/usn/USN-3002-1 - http://www.ubuntu.com/usn/USN-3021-1 - http://www.openwall.com/lists/oss-security/2016/04/06/4 - https://github.com/torvalds/linux/commit/1666984c8625b3db19a9abc298931d35ab7bc64b - http://www.ubuntu.com/usn/USN-2989-1 - https://www.spinics.net/lists/netdev/msg367669.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://www.ubuntu.com/usn/USN-3003-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4d06dd537f95683aba3651098ae288b7cbff8274 - http://www.ubuntu.com/usn/USN-2998-1
CVE ID: CVE-2016-3952 State: PUBLISHED Published: 2018-02-06T18:00:00 Last Updated: 2024-08-06T00:10:31.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/web2py/web2py/commit/9706d125b42481178d2b423de245f5d2faadbf40 - https://devco.re/blog/2017/01/03/web2py-unserialize-code-execution-CVE-2016-3957/ - https://usn.ubuntu.com/4030-1/
CVE ID: CVE-2016-3953 State: PUBLISHED Published: 2018-02-06T18:00:00 Last Updated: 2024-08-06T00:10:31.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors involving use of a hardcoded encryption key when calling the session.connect function. Additional Analyst Notes: - CVE Program Container: References: - https://devco.re/blog/2017/01/03/web2py-unserialize-code-execution-CVE-2016-3957/ - https://github.com/web2py/web2py/blob/R-2.14.1/applications/examples/models/session.py - https://usn.ubuntu.com/4030-1/
CVE ID: CVE-2016-3954 State: PUBLISHED Published: 2018-02-06T18:00:00 Last Updated: 2024-08-06T00:10:31.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: web2py before 2.14.2 allows remote attackers to obtain the session_cookie_key value via a direct request to examples/simple_examples/status. NOTE: this issue can be leveraged by remote attackers to execute arbitrary code using CVE-2016-3957. Additional Analyst Notes: - CVE Program Container: References: - https://devco.re/blog/2017/01/03/web2py-unserialize-code-execution-CVE-2016-3957/ - https://usn.ubuntu.com/4030-1/
CVE ID: CVE-2016-3955 State: PUBLISHED Published: 2016-07-03T21:00:00 Last Updated: 2024-08-06T00:10:31.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3004-1 - http://www.ubuntu.com/usn/USN-3001-1 - https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb - http://lists.opensuse.org/opensuse-securit
//github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.ubuntu.com/usn/USN-2997-1 - http://www.ubuntu.com/usn/USN-3000-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3002-1 - http://www.ubuntu.com/usn/USN-2996-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb - https://bugzilla.redhat.com/show_bug.cgi?id=1328478 - http://www.ubuntu.com/usn/USN-2989-1 - http://www.ubuntu.com/usn/USN-3003-1 - http://www.securityfocus.com/bi
=1328478 - http://www.ubuntu.com/usn/USN-2989-1 - http://www.ubuntu.com/usn/USN-3003-1 - http://www.securityfocus.com/bid/86534 - http://www.ubuntu.com/usn/USN-2998-1 - http://www.openwall.com/lists/oss-security/2016/04/19/1
CVE ID: CVE-2016-3956 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-06T00:10:31.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before 5.10.0, includes bearer tokens with arbitrary requests, which allows remote HTTP servers to obtain sensitive information by reading Authorization headers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/npm/npm/issues/8380 - https://github.com/npm/npm/commit/f67ecad59e99a03e5aad8e93cd1a086ae087cb29 - http://www-01.ibm.com/support/docview.wss?uid=swg2198
thub.com/npm/npm/commit/f67ecad59e99a03e5aad8e93cd1a086ae087cb29 - http://www-01.ibm.com/support/docview.wss?uid=swg21980827 - https://github.com/npm/npm/commit/fea8cc92cee02c720b58f95f14d315507ccad401 - http://blog.npmjs.org/post/142036323955/fixing-a-bearer-token-vulnerability - https://nodejs.org/en/blog/vulnerability/npm-tokens-leak-march-2016/
CVE ID: CVE-2016-3957 State: PUBLISHED Published: 2018-02-06T18:00:00 Last Updated: 2024-08-06T00:10:31.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryption_key. Additional Analyst Notes: - CVE Program Container: References: - https://devco.re/blog/2017/01/03/web2py-unserialize-code-execution-CVE-2016-3957/ - https://github.com/web2py/web2py/blob/R-2.14.1/gluon/utils.py#L200 - https://usn.ubuntu.com/4030-1/
CVE ID: CVE-2016-3958 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-06T00:10:31.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/04/05/2 - https://groups.google.com/forum/#%21topic/golang-announce/9eqIHqaWvck - https://github.com/golang/go/issues/14959 - http://www.openwall.com/lists/oss-security/2016/04/05/1 - https:/
IHqaWvck - https://github.com/golang/go/issues/14959 - http://www.openwall.com/lists/oss-security/2016/04/05/1 - https://go-review.googlesource.com/#/c/21428/
CVE ID: CVE-2016-3959 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-06T00:10:31.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/04/05/2 - https://go-review.googlesource.com/#/c/21533/ - http://rhn.redhat.com/errata/
wall.com/lists/oss-security/2016/04/05/2 - https://go-review.googlesource.com/#/c/21533/ - http://rhn.redhat.com/errata/RHSA-2016-1538.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182526.html - https://groups.google.com/forum/#%21topic/golang-announce/9eqIHqaWvck - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183106.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00077.html - http://www.openwall.com/lists/oss-security/2016/04/05/1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183137.html
CVE ID: CVE-2016-3960 State: PUBLISHED Published: 2016-04-19T14:00:00 Last Updated: 2024-08-06T00:10:31.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securitytracker.com/id/1035587 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184209.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/
/pipermail/package-announce/2016-May/184209.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183275.html - http://xenbits.xen.org/xsa/advisory-173.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183350.html - http://support.citrix.com/article/CTX209443 - http://www.securityfocus.com/bid/86318 - http://www.debian.org/security/2016/dsa-3554
CVE ID: CVE-2016-3961 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-06T00:10:31.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/xsa174.patch - http://www.ubuntu.com/usn/USN-3006-1 - http://www.ubuntu.com/usn/USN-3004-1 - http://www.ubuntu.com/usn/USN-3001-1 - http://xenbits.xen.org/xsa/advisory-174.html - http://www.ubuntu.com/usn/USN
-1 - http://www.ubuntu.com/usn/USN-3001-1 - http://xenbits.xen.org/xsa/advisory-174.html - http://www.ubuntu.com/usn/USN-3005-1 - http://www.securitytracker.com/id/1035569 - http://www.ubuntu.com/usn/USN-3049-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3002-1 - http://www.ubuntu.com/usn/USN-3050-1 - http://www.ubuntu.com/usn/USN-3007-1 - http://www.ubuntu.com/usn/USN-3003-1 - http://www.securityfocus.com/bid/86068
CVE ID: CVE-2016-3962 State: PUBLISHED Published: 2016-07-03T14:00:00 Last Updated: 2024-08-06T00:10:31.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40120/ - https
est. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40120/ - https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03
CVE ID: CVE-2016-3963 State: PUBLISHED Published: 2016-04-08T15:00:00 Last Updated: 2024-08-06T00:10:31.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SCALANCE S613 allows remote attackers to cause a denial of service (web-server outage) via traffic to TCP port 443. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-103-02 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-751155.pdf - https://www.exploit-db.com/exploits/44721/
CVE ID: CVE-2016-3968 State: PUBLISHED Published: 2016-04-06T18:00:00Z Last Updated: 2024-09-16T16:13:30.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web script or HTML via the (1) ipFamily parameter to corporate/webpages/trafficdiscovery/LiveConnections.jsp; the (2) ipFamily, (3) applicationname, or (4) username parameter to corporate/webpages/trafficdiscovery/LiveConnectionDetail.jsp; o
amily, (3) applicationname, or (4) username parameter to corporate/webpages/trafficdiscovery/LiveConnectionDetail.jsp; or the (5) X-Forwarded-For HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5313.php - http://packetstormsecurity.com/files/136561/Sophos-Cyberoam-NG-Series-Cross-Site-Scripting.html
CVE ID: CVE-2016-3969 State: PUBLISHED Published: 2016-04-06T18:00:00 Last Updated: 2024-08-06T00:10:31.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035470 - https://kc.mcafee.com/corporate/index?page=content&id=SB10153
CVE ID: CVE-2016-3971 State: PUBLISHED Published: 2016-04-18T15:00:00 Last Updated: 2024-08-06T00:10:31.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to c/portal/layout. Additional Analyst Notes: - CVE Program Container: References: - http://dotcms.com/security/SI-33 - http://seclists.org/fulldisclosure/2016/Apr/37
CVE ID: CVE-2016-3972 State: PUBLISHED Published: 2016-04-18T15:00:00 Last Updated: 2024-08-06T00:10:31.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the fileName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dotcms.com/security/SI-34 - http://seclists.org/fulldisclosure/2016/Apr/36
CVE ID: CVE-2016-3973 State: PUBLISHED Published: 2016-04-07T19:00:00 Last Updated: 2024-08-06T00:10:31.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tc~rtc~coll.appl.rtc~wd_chat/Chat#, pressing "Add users", and doing a search, aka SAP Security Note 2255990. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137579/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html - https://erpscan.io/press-center/blog/sap-
urity.com/files/137579/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html - https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/ - https://erpscan.io/advisories/erpscan-16-016-sap-netweaver-7-4-information-disclosure-wd_chat/ - http://seclists.org/fulldisclosure/2016/Jun/46
CVE ID: CVE-2016-3974 State: PUBLISHED Published: 2016-04-07T19:00:00 Last Updated: 2024-08-06T00:10:31.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to _tc~monitoring~webservice~web/ServerNodesWSService, aka SAP Security Note 2235994. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-013-sap-netweaver-7-4-ctcprotocol-servlet-xxe/ - http://seclists.org/fulldisclosure/2016/Jun/41 -
advisories/erpscan-16-013-sap-netweaver-7-4-ctcprotocol-servlet-xxe/ - http://seclists.org/fulldisclosure/2016/Jun/41 - https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/ - https://www.exploit-db.com/exploits/39995/ - http://packetstormsecurity.com/files/137527/SAP-NetWeaver-AS-JAVA-7.5-XXE-Injection.html
CVE ID: CVE-2016-3975 State: PUBLISHED Published: 2016-04-07T19:00:00 Last Updated: 2024-08-06T00:10:31.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to inject arbitrary web script or HTML via the navigationTarget parameter to irj/servlet/prt/portal/prteventname/XXX/prtroot/com.sapportals.navigation.testComponent.NavigationURLTester, aka SAP Security Note 2238375. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137529/SAP-NetWeaver-AS-JAVA-7.5-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2016/Jun/42
ty.com/files/137529/SAP-NetWeaver-AS-JAVA-7.5-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2016/Jun/42 - https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/ - https://erpscan.io/advisories/erpscan-16-014-sap-netweaver-7-4-navigationurltester/
CVE ID: CVE-2016-3976 State: PUBLISHED Published: 2016-04-07T23:00:00.000Z Last Updated: 2025-10-21T23:55:54.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://erpscan.io/press-center/blog/sap-security-notes-march-2016-review/ - http://seclists.org/fulldisclosure/2016/Jun/40 - http://packetstormsecurity.com/files/137528/SAP-NetWeaver-AS-JAVA-7.5-Di
ttp://seclists.org/fulldisclosure/2016/Jun/40 - http://packetstormsecurity.com/files/137528/SAP-NetWeaver-AS-JAVA-7.5-Directory-Traversal.html - https://erpscan.io/advisories/erpscan-16-012/ - https://www.exploit-db.com/exploits/39996/ - https://launchpad.support.sap.com/#/notes/2234971