Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8721 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-06T02:27:41.340Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Moxa Products: Moxa AWK-3131A WAP Problem Types: remote code execution Description: An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An attacker can exploit this vulnerability remotely. Additional Analyst Notes: - CVE Program Container: References: - http://www.talo
an exploit this vulnerability remotely. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0235/
CVE ID: CVE-2016-8722 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T02:27:41.261Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: Web Application Authentication Description: An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Retrieving a specific URL without authentication can reveal sensitive information to an attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintel
itive information to an attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0236/
CVE ID: CVE-2016-8723 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T02:27:41.258Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: Denial of Service Description: An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET request not preceded by an '/' will cause a segmentation fault in the web server. An attacker can send any of a multitude of potentially unexpected HTTP get requests to trigger this vulnerability. Additional Analyst No
send any of a multitude of potentially unexpected HTTP get requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0237/
CVE ID: CVE-2016-8724 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T02:27:41.326Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: Information Disclosure Description: An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted TCP query will allow an attacker to retrieve potentially sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-201
ion. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0238/
CVE ID: CVE-2016-8725 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T02:27:41.298Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: Information Disclosure Description: An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A wireless access point running firmware 1.1. Retrieving a specific URL without authentication can reveal sensitive information to an attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALO
attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0239/
CVE ID: CVE-2016-8726 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T02:27:41.467Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: Header Manipulation Description: An exploitable null pointer dereference vulnerability exists in the Web Application /forms/web_runScript iw_filename functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. An HTTP POST request with a blank line in the header will cause a segmentation fault in the web server. Additional Analyst Notes: - CVE Program Container: References: - http://www.ta
e a segmentation fault in the web server. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0240/
CVE ID: CVE-2016-8727 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T02:27:41.260Z Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: URL authentication Description: An exploitable information disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point. Retrieving a series of URLs without authentication can reveal sensitive configuration and system information to an attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0241/
CVE ID: CVE-2016-8728 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T18:13:38.660Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Artifex Software Inc. Products: MuPDF Problem Types: Out of bounds Write Description: An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap metadata and sensitive process memory corruption leading to potential code execution. Victim needs to open the specially crafted file in a vulnerable reader in order to trigger this vulnerability. Additional Analyst Notes: - C
the specially crafted file in a vulnerable reader in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0242
CVE ID: CVE-2016-8729 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T17:24:06.366Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Artifex Software Inc. Products: MuPDF Problem Types: remote code execution Description: An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the victim to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.c
ger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0243
CVE ID: CVE-2016-8730 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T16:39:07.358Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Corel Products: Corel PHOTO-PAINT Problem Types: Out of bounds Write Description: An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a specific GIF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
rigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99900 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0244
CVE ID: CVE-2016-8731 State: PUBLISHED Published: 2017-06-21T19:00:00 Last Updated: 2024-08-06T02:27:41.251Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscan Products: Foscam C1 Webcam Problem Types: password vulnerability Description: Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99193 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-02
rences: - http://www.securityfocus.com/bid/99193 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0245
CVE ID: CVE-2016-8732 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T22:29:55.500Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Invincea Products: Dell Protected Workspace Problem Types: weak permissions Description: Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additional insufficient checks allow any application to turn off some of the protection mechanisms provided by the Invincea product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99360 - https:
roduct. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99360 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0246
CVE ID: CVE-2016-8733 State: PUBLISHED Published: 2016-12-14T17:00:00 Last Updated: 2024-08-06T02:27:41.257Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Joyent Products: SmartOS Problem Types: integer overflow Description: An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a kernel panic and potentially be leveraged into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-9031. Additional Analyst No
into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-9031. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94920 - http://www.talosintelligence.com/reports/TALOS-2016-0248/
CVE ID: CVE-2016-8734 State: PUBLISHED Published: 2017-10-16T13:00:00Z Last Updated: 2024-09-16T20:01:52.257Z Vendors: Apache Software Foundation Products: Apache Subversion Problem Types: Denial of Service Description: Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94588 - https://lists.apache.org/thread.html/7798f5cda1b2a3c70db4be77694b12dec8fcc1a441
http://www.securityfocus.com/bid/94588 - https://lists.apache.org/thread.html/7798f5cda1b2a3c70db4be77694b12dec8fcc1a441b00009d44f0e09%40%3Cannounce.apache.org%3E - http://www.securitytracker.com/id/1037361 - http://www.debian.org/security/2017/dsa-3932 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://subversion.apache.org/security/CVE-2016-8734-advisory.txt
CVE ID: CVE-2016-8735 State: PUBLISHED Published: 2017-04-06T21:00:00.000Z Last Updated: 2025-10-21T23:55:42.758Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Remote code execution Description: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/
types. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://svn.apache.org/viewvc?view=revision&revision=1767676 - http://tomcat.apache.org/security-9.html - http://www.securitytracker.com/id/1037331 - http://www.securityfocus.com/bid/94463 - http://www.debian.org/security/2016/dsa-3738 - http://tomcat.apache.org/security-7.html - http://svn.apache.org/viewvc?view=revision&revision=1767644 - http://tomcat.apache.org/security-8.html - http://svn.apache.org/viewvc?view=revision&revision=1767656 -
ision=1767644 - http://tomcat.apache.org/security-8.html - http://svn.apache.org/viewvc?view=revision&revision=1767656 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://security.netapp.com/advisory/ntap-20180607-0001/ - http://tomcat.apache.org/security-6.html - http://rhn.redhat.com/errata/RHSA-2017-0457.html - https://access.redhat.com/errata/RHSA-2017:0455 - http://svn.apache.org/viewvc?view=revision&revision=1767684 - https://access.redhat.com/errata/RHSA-2017:0456 - http://seclists.org/oss-sec/2016/q4/502 - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apac
/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%
ev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad12
7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987
c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E - https://usn.ubuntu.com/4557-1/
CVE ID: CVE-2016-8736 State: PUBLISHED Published: 2017-10-12T18:00:00 Last Updated: 2024-08-06T02:27:41.285Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: n/a Description: Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack. Additional Analyst Notes: - CVE Program Container: References: - http://openmeetings.markmail.org/thread/tr47byaaopnemvne - http://www.securityfocus.com/bid/94145
CVE ID: CVE-2016-8737 State: PUBLISHED Published: 2017-09-13T16:00:00Z Last Updated: 2024-09-17T03:34:06.512Z Vendors: Apache Software Foundation Products: Apache Brooklyn Problem Types: Cross-site request forgery (CSRF) Description: In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker's commands as the user. There is known to be a proof-of-concept exploit using this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://brooklyn.apache.org/community/
s vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://brooklyn.apache.org/community/security/CVE-2016-8737.html - http://www.securityfocus.com/bid/96228 - https://lists.apache.org/thread.html/877813aaaa0e636adbc36106b89a54e0e6918f0884e9c8b67d5d5953%40%3Cdev.brooklyn.apache.org%3E
CVE ID: CVE-2016-8738 State: PUBLISHED Published: 2017-09-20T17:00:00Z Last Updated: 2024-09-16T20:32:00.228Z Vendors: Apache Software Foundation Products: Apache Struts Problem Types: Possible DoS attack when using URLValidator Description: In Apache Struts 2.5 through 2.5.5, if an application allows entering a URL in a form field and the built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20180629-0003/ - http://www.securityfocus.com/bid/94657 - https://struts.apache.org/docs/s2-044
netapp.com/advisory/ntap-20180629-0003/ - http://www.securityfocus.com/bid/94657 - https://struts.apache.org/docs/s2-044.html
CVE ID: CVE-2016-8739 State: PUBLISHED Published: 2017-08-10T18:00:00Z Last Updated: 2024-09-16T22:51:45.164Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: XXE risk Description: The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands XML entities by default which represents a major XXE risk. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97579 - https://access.redhat.com/errata/RHSA-2017:0868 - http://www.securitytracker.com/id/1037544 - http://cxf.apache.org/security-advisories.data/CVE-2016-87
/RHSA-2017:0868 - http://www.securitytracker.com/id/1037544 - http://cxf.apache.org/security-advisories.data/CVE-2016-8739.txt.asc - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4
d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2016-8740 State: PUBLISHED Published: 2016-12-05T19:00:00 Last Updated: 2024-08-06T02:34:59.624Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: n/a Description: The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in an HTTP/2 request. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208221 - https://github.com/apache/httpd/commit/29c63b786ae028d82405421585e91283c8fa0da3 - http://www.s
port.apple.com/HT208221 - https://github.com/apache/httpd/commit/29c63b786ae028d82405421585e91283c8fa0da3 - http://www.securitytracker.com/id/1037388 - http://packetstormsecurity.com/files/140023/Apache-HTTPD-Web-Server-2.4.23-Memory-Exhaustion.html - https://access.redhat.com/errata/RHSA-2017:1413 - https://access.redhat.com/errata/RHSA-2017:1161 - https://www.tenable.com/security/tns-2017-04 - https://access.redhat.com/errata/RHSA-2017:1414 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us - https://www.exploit-db.com/exploits/40909/ - http://rhn.redhat.com/errata/RHSA-2017-1415.html - http://www.securityfocus.com/bid/94650 - https://secur
loits/40909/ - http://rhn.redhat.com/errata/RHSA-2017-1415.html - http://www.securityfocus.com/bid/94650 - https://security.gentoo.org/glsa/201701-36 - https://security.netapp.com/advisory/ntap-20180423-0001/ - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apa
g%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784
acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists
e.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E