Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10725 State: PUBLISHED Published: 2018-07-05T22:00:00 Last Updated: 2024-08-06T03:30:20.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operations occur in the wrong order. This behavior occurs in the remote network alert system (deprecated since Q1 2016). This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins. Additional Analyst Notes: - CVE Program Container: References: - https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-July/016189.html - http
VE Program Container: References: - https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-July/016189.html - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - https://github.com/JinBean/CVE-Extension - https://bitcoin.org/en/posts/alert-key-and-vulnerabilities-disclosure
CVE ID: CVE-2016-10726 State: PUBLISHED Published: 2018-07-10T11:00:00 Last Updated: 2024-08-06T03:30:20.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated by a themes/Reference/aa:etc/passwd URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DSpace/DSpace/releases/tag/dspace-5.5 - https://wiki.duraspace.org/display/DSDOC5x/Release+Notes - https://jira.duraspace.org/browse/DS-3094
CVE ID: CVE-2016-10727 State: PUBLISHED Published: 2018-07-20T04:00:00 Last Updated: 2024-08-06T03:30:20.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GNOME/e
ode was written incorrectly. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GNOME/evolution-data-server/releases/tag/EVOLUTION_DATA_SERVER_3_21_2 - https://gitlab.gnome.org/GNOME/evolution-data-server/blob/master/NEWS#L1022 - https://bugzilla.redhat.com/show_bug.cgi?id=1334842 - https://usn.ubuntu.com/3724-1/ - https://gitlab.gnome.org/GNOME/evolution-data-server/commit/f26a6f67
CVE ID: CVE-2016-10728 State: PUBLISHED Published: 2018-07-23T20:00:00 Last Updated: 2024-08-06T03:30:20.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection. Additional Analyst Notes: - CVE Program Container: References: - https://suricata-ids.org/2016/09/07/suricata-3-1-2-released/ - https://redmine.openinfosecfoundation.org/issues/1880 - https://lists.debian.org/debian-lts-announce/2018/09
released/ - https://redmine.openinfosecfoundation.org/issues/1880 - https://lists.debian.org/debian-lts-announce/2018/09/msg00019.html - https://github.com/kirillwow/ids_bypass
CVE ID: CVE-2016-10729 State: PUBLISHED Published: 2018-10-24T21:00:00 Last Updated: 2024-08-06T03:30:20.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform command injection as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39217/
CVE ID: CVE-2016-10730 State: PUBLISHED Published: 2018-10-24T21:00:00 Last Updated: 2024-08-06T03:30:20.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API script. It should not be run by users directly. It uses star to backup and restore data. It runs binaries with root permissions when parsing the command line argument --star-path. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39244/
CVE ID: CVE-2016-10731 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-06T03:30:20.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProjectSend (formerly cFTP) r582 allows SQL injection via manage-files.php with the request parameter status, manage-files.php with the request parameter files, clients.php with the request parameter selected_clients, clients.php with the request parameter status, process-zip-download.php with the request parameter file, or home-log.php with the request parameter action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandboxescape/ProjectSend-multiple-vulnerabilities/
CVE ID: CVE-2016-10732 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-06T03:30:20.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProjectSend (formerly cFTP) r582 allows authentication bypass via a direct request for users.php, home.php, edit-file.php?file_id=1, or process-zip-download.php, or add_user_form_* parameters to users-add.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandboxescape/ProjectSend-multiple-vulnerabilities/
CVE ID: CVE-2016-10733 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-06T03:30:20.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandboxescape/ProjectSend-multiple-vulnerabilities/
CVE ID: CVE-2016-10734 State: PUBLISHED Published: 2018-10-28T03:00:00 Last Updated: 2024-08-06T03:30:20.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sandboxescape/ProjectSend-multiple-vulnerabilities/
CVE ID: CVE-2016-10735 State: PUBLISHED Published: 2019-01-09T05:00:00 Last Updated: 2024-08-06T03:30:20.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452140906 - https://github.com/twbs/bootstrap/pull/26460 - https://github.com/twbs/bootstrap/issues/20184 - https://github.com/twbs/bootstrap/pull/23687 - https://github.com/twbs/bootstrap/pull/23679 - https://blog.getbootstrap.com/2018/12/13/bootst
bs/bootstrap/pull/23687 - https://github.com/twbs/bootstrap/pull/23679 - https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ - https://access.redhat.com/errata/RHSA-2019:1456 - https://access.redhat.com/errata/RHBA-2019:1076 - https://access.redhat.com/errata/RHBA-2019:1570 - https://access.redhat.com/errata/RHSA-2019:3023 - https://access.redhat.com/errata/RHSA-2020:0132 - https://access.redhat.com/errata/RHSA-2020:0133 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2016-10736 State: PUBLISHED Published: 2019-01-09T23:00:00 Last Updated: 2024-08-06T03:30:20.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.dxw.com/advisories/reflected-xss-in-social-pug-easy-social-share-buttons-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can/
CVE ID: CVE-2016-10737 State: PUBLISHED Published: 2019-01-16T04:00:00Z Last Updated: 2024-09-17T00:01:41.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40650
CVE ID: CVE-2016-10738 State: PUBLISHED Published: 2019-01-16T04:00:00Z Last Updated: 2024-09-16T21:08:33.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenbership v107 has CSRF via admin/cp-functions/event-add.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40620
CVE ID: CVE-2016-10739 State: PUBLISHED Published: 2019-01-21T19:00:00 Last Updated: 2024-08-06T03:30:20.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=20018 - http://www.securityfocus.com/bid/106
am Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=20018 - http://www.securityfocus.com/bid/106672 - https://bugzilla.redhat.com/show_bug.cgi?id=1347549 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00082.html - https://access.redhat.com/errata/RHSA-2019:2118 - https://access.redhat.com/errata/RHSA-2019:3513
CVE ID: CVE-2016-10740 State: PUBLISHED Published: 2019-01-29T02:00:00Z Last Updated: 2024-09-16T18:24:07.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories by examining the responses to requests for these resources. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CWD-5060
CVE ID: CVE-2016-10741 State: PUBLISHED Published: 2019-02-01T16:00:00 Last Updated: 2024-08-06T03:30:20.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) because there is a race condition between direct and memory-mapped I/O (associated with a hole) that is handled with BUG_ON instead of an I/O failure. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.3 - http://www.securityfocus.com/bid/106822 - https://bugzilla.suse.com/show_bug.cgi?id=1124010 - https://github.com/torvalds/linux/commit/04
tyfocus.com/bid/106822 - https://bugzilla.suse.com/show_bug.cgi?id=1124010 - https://github.com/torvalds/linux/commit/04197b341f23b908193308b8d63d17ff23232598 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04197b341f23b908193308b8d63d17ff23232598 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
CVE ID: CVE-2016-10742 State: PUBLISHED Published: 2019-02-17T16:00:00 Last Updated: 2024-08-06T03:30:20.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter. Additional Analyst Notes: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-10272 - https://lists.debian.org/debian-lts-announce/2019/03/msg00010.html - https://support.zabbix.com/browse/ZBX-13133 - https://lists.debian.org/debian-lts-announce/2020/11/msg00039.html
CVE ID: CVE-2016-10743 State: PUBLISHED Published: 2019-03-23T18:55:50 Last Updated: 2024-08-06T03:30:20.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/cgit/hostap/commit/?id=98a516eae8260e6fd5c48ddecf8d006285da7389 - https://lists.debian.org/debian-lts-announce/2019/03/msg00035.html - https://usn.ubuntu.com/3944-1/ - http://www.openwall.com/lists/oss-security/2020/02/27/1 - http://www.openwall.com/lists/oss-security/2020/02/27/2 - http://seclists.org/fulldisclosure/2020/Feb/26 - http:/
27/1 - http://www.openwall.com/lists/oss-security/2020/02/27/2 - http://seclists.org/fulldisclosure/2020/Feb/26 - http://packetstormsecurity.com/files/156573/Hostapd-Insufficient-Entropy.html
CVE ID: CVE-2016-10744 State: PUBLISHED Published: 2019-03-27T03:54:26 Last Updated: 2024-08-06T03:30:20.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/snipe/snipe-it/pull/6831 - https://github.com/select2/select2/issues/4587 - https://github.com/snipe/snipe-it/pull/6831/commits/5848d9a10c7d62c73ff6a3858edfae96a429402a
CVE ID: CVE-2016-10745 State: PUBLISHED Published: 2019-04-08T13:00:48 Last Updated: 2024-08-06T03:30:20.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. Additional Analyst Notes: - CVE Program Container: References: - https://palletsprojects.com/blog/jinja-281-released/ - https://github.com/pallets/jinja/commit/9b53045c34e61013dc8f09b7e52a555fa16bed16 - https://access.redhat.com/errata/RHSA-2019:1022 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html - https://access.redhat.com/errata/RHSA-2019:1237 - https://access.redhat.com/errata/RHSA-2019:1260 - https://usn.ubuntu.com/4011-1/ - h
.redhat.com/errata/RHSA-2019:1237 - https://access.redhat.com/errata/RHSA-2019:1260 - https://usn.ubuntu.com/4011-1/ - https://usn.ubuntu.com/4011-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html - https://access.redhat.com/errata/RHSA-2019:3964 - https://access.redhat.com/errata/RHSA-2019:4062
CVE ID: CVE-2016-10746 State: PUBLISHED Published: 2019-04-18T15:56:00 Last Updated: 2024-08-06T03:30:20.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libvirt/libvirt/commit/506e9d6c2d4baaf580d489fff0690c0ff2ff588f - https://github.com/libvirt/libvirt/compare/11288f5...8fd6867 - https://lists.debian.org/debian-lts-announce/2019/04/msg00032.html
CVE ID: CVE-2016-10749 State: PUBLISHED Published: 2019-04-29T13:46:59 Last Updated: 2024-08-06T03:30:20.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DaveGamble/cJSON/issues/30 - https://www.openwall.com/lists/oss-security/2016/11/07/2 - https://github.com/DaveGamble/cJSON/commit/94df772485c92866ca417d92137747b2e3b0a917
CVE ID: CVE-2016-10750 State: PUBLISHED Published: 2019-05-22T13:40:06 Last Updated: 2024-08-06T03:30:20.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hazelcast/hazelcast/issues/8024 - https://github.com/hazelcast/hazelcast/pull/12230 - https://access.redhat.com/errata/RHSA-2019:2413
CVE ID: CVE-2016-10751 State: PUBLISHED Published: 2019-05-24T17:40:09 Last Updated: 2024-08-06T03:30:20.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&action=ajax_upload. Additional Analyst Notes: - CVE Program Container: References: - https://demo.ripstech.com/projects/osclass_3.6.1 - https://blog.ripstech.com/2016/osclass-remote-code-execution-via-image-file/
CVE ID: CVE-2016-10752 State: PUBLISHED Published: 2019-05-24T17:40:22 Last Updated: 2024-08-06T03:30:20.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: serendipity_moveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2016/serendipity-from-file-upload-to-code-execution/ - https://demo.ripstech.com/projects/serendipity_2.0.3
CVE ID: CVE-2016-10753 State: PUBLISHED Published: 2019-05-24T17:40:34 Last Updated: 2024-08-06T03:30:20.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC. Additional Analyst Notes: - CVE Program Container: References: - https://demo.ripstech.com/projects/e107_2.1.2 - https://blog.ripstech.com/2016/e107-sql-injection-through-object-injection/
CVE ID: CVE-2016-10754 State: PUBLISHED Published: 2019-05-24T17:40:48 Last Updated: 2024-08-06T03:30:20.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter. Additional Analyst Notes: - CVE Program Container: References: - https://demo.ripstech.com/projects/vtiger_6.5.0 - https://blog.ripstech.com/2016/vtiger-sql-injection/
CVE ID: CVE-2016-10755 State: PUBLISHED Published: 2019-05-24T17:41:01 Last Updated: 2024-08-06T03:30:20.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: AbanteCart 1.2.8 allows SQL Injection via the source_language parameter to admin/controller/pages/localisation/language.php and core/lib/language_manager.php, or via POST data to admin/controller/pages/tool/backup.php and admin/model/tool/backup.php. Additional Analyst Notes: - CVE Program Container: References: - https://demo.ripstech.com/projects/abantecart_1.2.8 - https://blog.ripstech.com/2016/abantecart-multiple-sql-injections/
CVE ID: CVE-2016-10756 State: PUBLISHED Published: 2019-05-24T17:41:16 Last Updated: 2024-08-06T03:30:20.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2016/kliqqi-from-cross-site-request-forgery-to-code-execution/ - https://demo.ripstech.com/projects/kliqqi_3.0.0.5
CVE ID: CVE-2016-10757 State: PUBLISHED Published: 2019-05-24T17:41:31 Last Updated: 2024-08-06T03:30:20.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2016/redaxo-remote-code-execution-via-csrf/ - https://demo.ripstech.com/projects/redaxo_5.2.0
CVE ID: CVE-2016-10758 State: PUBLISHED Published: 2019-05-24T17:41:45 Last Updated: 2024-08-06T03:30:20.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the image_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2016/phpkit-code-exection-for-privileged-users/ - https://demo.ripstech.com/projects/phpkit_1.6.6
CVE ID: CVE-2016-10759 State: PUBLISHED Published: 2019-05-24T17:41:57 Last Updated: 2024-08-06T03:38:55.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2016/precurio-remote-command-execution-via-xinha-plugin/ - https://demo.ripstech.com/projects/precurio_2.1
CVE ID: CVE-2016-10760 State: PUBLISHED Published: 2019-06-11T20:46:33 Last Updated: 2024-08-06T03:38:55.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Seowon Intech routers, there is a Command Injection vulnerability in diagnostic.cgi via shell metacharacters in the ping_ipaddr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ethical-hacker.org/en/seowonintech-remote-root/
CVE ID: CVE-2016-10761 State: PUBLISHED Published: 2019-06-29T19:06:11 Last Updated: 2024-08-06T03:38:55.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BastilleResearch/mousejack/blob/master/doc/advisories/bastille-2.logitech.public.txt - https://www.kb.cert.org/vuls/id/981271
CVE ID: CVE-2016-10762 State: PUBLISHED Published: 2019-07-18T11:22:33 Last Updated: 2024-08-06T03:38:55.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/151516 - https://wordpress.org/plugins/camptix/#developers
CVE ID: CVE-2016-10763 State: PUBLISHED Published: 2019-07-18T11:22:22 Last Updated: 2024-08-06T03:38:55.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/camptix/#developers - https://hackerone.com/reports/152958