Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8530 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T20:51:47.923Z Vendors: Hewlett Packard Enterprise Products: iMC PLAT Problem Types: remote denial of service Description: A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-09 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05382418
CVE ID: CVE-2016-8531 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T19:52:25.174Z Vendors: Hewlett Packard Enterprise Products: Matrix Operating Environment Problem Types: remote information disclosure Description: A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680
CVE ID: CVE-2016-8532 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T16:12:46.620Z Vendors: Hewlett Packard Enterprise Products: Matrix Operating Environment Problem Types: XSS Description: A cross site scripting vulnerability in HPE Matrix Operating Environment version 7.6 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680
CVE ID: CVE-2016-8533 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T19:31:01.442Z Vendors: Hewlett Packard Enterprise Products: Matrix Operating Environment Problem Types: Priviledge Escalation Description: A remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680
CVE ID: CVE-2016-8534 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-16T19:30:15.776Z Vendors: Hewlett Packard Enterprise Products: Matrix Operating Environment Problem Types: privilege elevation Description: A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680
CVE ID: CVE-2016-8535 State: PUBLISHED Published: 2018-02-15T22:00:00Z Last Updated: 2024-09-17T00:01:05.906Z Vendors: Hewlett Packard Enterprise Products: Matrix Operating Environment Problem Types: Http Parameter Pollutio Description: A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05385680
CVE ID: CVE-2016-8536 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8537 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8538 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8539 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8540 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8541 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8542 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8543 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8544 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8545 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8546 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8547 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8548 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8549 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8550 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8551 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8552 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8553 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8554 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8555 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8556 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8557 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8558 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8559 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8560 State: REJECTED Published: 2017-02-22T21:00:00 Last Updated: 2017-02-22T20:57:01 Description: No description available.
CVE ID: CVE-2016-8561 State: PUBLISHED Published: 2016-11-18T21:00:00 Last Updated: 2024-08-06T02:27:40.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94436 - https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdf - https://cer
advisories/ICSA-16-327-01 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf
CVE ID: CVE-2016-8562 State: PUBLISHED Published: 2016-11-18T21:00:00.000Z Last Updated: 2025-10-21T23:55:48.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write SNMP variables on port 161/udp which should be read-only and should only be configured with TIA-Portal. A write to these variables could reduce the availability or cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/94436 - https://ics-cert.us-cert.
ram Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/94436 - https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf
CVE ID: CVE-2016-8563 State: PUBLISHED Published: 2016-10-13T10:00:00 Last Updated: 2024-08-06T02:27:40.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets to TCP port 4410. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02 - http://www.securitytracker.com/id/1037011 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdf - http://www.securityfocus.com/bid/93553
CVE ID: CVE-2016-8564 State: PUBLISHED Published: 2016-10-13T10:00:00 Last Updated: 2024-08-06T02:27:41.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02 - http://www.securitytracker.com/id/1037011 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdf - http://www.securityfocus.com/bid/93553
CVE ID: CVE-2016-8565 State: PUBLISHED Published: 2016-10-13T10:00:00 Last Updated: 2024-08-06T02:27:40.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-02 - http://www.securitytracker.com/id/1037011 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284342.pdf - http://www.securityfocus.com/bid/93553
CVE ID: CVE-2016-8566 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:27:40.901Z Vendors: n/a Products: Siemens SICAM PAS before 8.00 Problem Types: Siemens SICAM PAS Storing Passwords in a Recoverable Format Description: An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94552 - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-01
CVE ID: CVE-2016-8567 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:27:40.705Z Vendors: n/a Products: Siemens SICAM PAS before 8.00 Problem Types: Siemens SICAM PAS hard-coded passwords Description: An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-01 - http://www.securityfocus.com/bid/94549
CVE ID: CVE-2016-8568 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T02:27:40.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1383211 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JBSNJAXP7JA3TGE2NPNRTD77JXFG4E/ - https://github.com/libgit2/libgit2/issues/3936 - http://www.openwall.com/lists/oss-securi
NJAXP7JA3TGE2NPNRTD77JXFG4E/ - https://github.com/libgit2/libgit2/issues/3936 - http://www.openwall.com/lists/oss-security/2016/10/08/7 - https://github.com/libgit2/libgit2/releases/tag/v0.24.3 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVUEIG6EESZB6BRU2IE3F5NRUEHMAEKC/ - http://lists.opensuse.org/opensuse-updates/2017-01/msg00114.html - http://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html - http://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4E77DG
/msg00103.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4E77DG5KGQ7L34U75QY7O6NIPKZNQHQJ/ - http://www.securityfocus.com/bid/93466
CVE ID: CVE-2016-8569 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T02:27:40.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1383211 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JBSNJAXP7JA3TGE2NPNRTD77JXFG4E/ - http://www.securityfocus.com/bid/93465 - http://www.openwall.com/lists/oss-security/20
JBSNJAXP7JA3TGE2NPNRTD77JXFG4E/ - http://www.securityfocus.com/bid/93465 - http://www.openwall.com/lists/oss-security/2016/10/08/7 - https://github.com/libgit2/libgit2/issues/3937 - https://github.com/libgit2/libgit2/releases/tag/v0.24.3 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVUEIG6EESZB6BRU2IE3F5NRUEHMAEKC/ - http://lists.opensuse.org/opensuse-updates/2017-01/msg00114.html - http://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html - http://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html - https://lists.fedoraproject.org/archives/list/package-annou
/lists.opensuse.org/opensuse-updates/2017-01/msg00103.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4E77DG5KGQ7L34U75QY7O6NIPKZNQHQJ/
CVE ID: CVE-2016-8574 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:27:41.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-8575 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:27:40.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-8576 State: PUBLISHED Published: 2016-11-04T21:00:00 Last Updated: 2024-08-06T02:27:40.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg01265.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201611-11 - http://
ttps://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201611-11 - http://www.openwall.com/lists/oss-security/2016/10/10/6 - https://access.redhat.com/errata/RHSA-2017:2392 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://www.openwall.com/lists/oss-security/2016/10/10/12 - https://access.redhat.com/errata/RHSA-2017:2408 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=05f43d44e4bc26611ce25fd7d726e483f73363ce - http://www.securityfocus.com/bid/93469
CVE ID: CVE-2016-8577 State: PUBLISHED Published: 2016-11-04T21:00:00 Last Updated: 2024-08-06T02:27:40.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e95c9a493a5a8d6f969e86c9f19f80ffe6587e19 - https://security.gentoo.org/glsa/201611-11 - http://www.openwall.com/lists/oss-security/2016/10/10/7 - http://lists.opensuse.org/opensuse-updates/2016-12/msg0014
1 - http://www.openwall.com/lists/oss-security/2016/10/10/7 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://www.openwall.com/lists/oss-security/2016/10/10/13 - http://www.securityfocus.com/bid/93473 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-8578 State: PUBLISHED Published: 2016-11-04T21:00:00 Last Updated: 2024-08-06T02:27:40.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/10/14 - http://www.openwall.com/lists/oss-security/2016/10/10/8 - https://security.gentoo.org/glsa/201611-11 - http://lists.opensuse.org/opensuse-updates/20
s/oss-security/2016/10/10/8 - https://security.gentoo.org/glsa/201611-11 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://www.securityfocus.com/bid/93474 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg07143.html
CVE ID: CVE-2016-8579 State: PUBLISHED Published: 2016-10-28T15:00:00 Last Updated: 2024-08-06T02:27:41.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appc/docker2aci/issues/203 - http://www.securityfocus.com/bid/93560
CVE ID: CVE-2016-8580 State: PUBLISHED Published: 2016-10-28T15:00:00 Last Updated: 2024-08-06T02:27:40.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes. Additional Analyst Notes: - CVE Program Container: References: - https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities - https://www.exploit-db.com/exploits/40682/ - http://www.securityfocus.com/bid/93864
CVE ID: CVE-2016-8581 State: PUBLISHED Published: 2016-10-28T15:00:00 Last Updated: 2024-08-06T02:27:40.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the current sessions are viewed by an administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93862 - https://www.exploit-db.com/exploits/40683/ - https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities
CVE ID: CVE-2016-8582 State: PUBLISHED Published: 2016-10-28T15:00:00 Last Updated: 2024-08-06T02:27:40.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40684/ - https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities - http://www.securityfocus.com/bid/93866
CVE ID: CVE-2016-8583 State: PUBLISHED Published: 2016-10-28T15:00:00 Last Updated: 2024-08-06T02:27:40.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities - http://www.securityfocus.com/bid/93863
CVE ID: CVE-2016-8584 State: PUBLISHED Published: 2017-04-28T19:00:00 Last Updated: 2024-08-06T02:27:41.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass authentication by guessing the value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98333 - http://packetstormsecurity.com/files/142227/Trend-Micro-Threat-Discovery-Appliance-2.6.1062r1-Session-Generation-Authentication-Bypass.html
CVE ID: CVE-2016-8585 State: PUBLISHED Published: 2017-04-28T19:00:00 Last Updated: 2024-08-06T02:27:41.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the timezone parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/142223/Trend-Micro-Threat-Discovery-Appliance-2.6.1062r1-admin_sys_time.cgi-Remote-Code-Execution.html - http://packetstormsecurity.com/files/142224/Trend-Micro-Threat-Discovery-Appliance-2.6.1062r1-admin_sys_time.cgi
.html - http://packetstormsecurity.com/files/142224/Trend-Micro-Threat-Discovery-Appliance-2.6.1062r1-admin_sys_time.cgi-Remote-Code-Execution.html - http://www.securityfocus.com/bid/98342
CVE ID: CVE-2016-8586 State: PUBLISHED Published: 2017-04-28T19:00:00 Last Updated: 2024-08-06T02:27:40.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cache_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98376 - http://packetstormsecurity.com/files/142222/Trend-Micro-Threat-Discovery-Appliance-2.6.1062r1-detected_potential_files.cgi-Remote-Code-Execution.html