Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4493 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-06T00:32:25.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/ml/gcc-patches/2016-05/msg00223.html - http://www.openwall.com/lists/oss-security/2016/05/05/5 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70926 - http://www.securityfocus.com/bid/90014
CVE ID: CVE-2016-4494 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T00:32:25.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to hijack the authentication of unspecified victims for requests that disclose the contents of a configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-126-01
CVE ID: CVE-2016-4495 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T00:32:25.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a configuration file via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-126-01
CVE ID: CVE-2016-4496 State: PUBLISHED Published: 2016-05-12T01:00:00 Last Updated: 2024-08-06T00:32:25.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-16-337/ - https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01 - http://zerodayinitiative.com/advisories/ZDI-16-333/ - http://zerodayinitiative.com/advisories/ZDI-16-336/ - http://zer
- http://zerodayinitiative.com/advisories/ZDI-16-333/ - http://zerodayinitiative.com/advisories/ZDI-16-336/ - http://zerodayinitiative.com/advisories/ZDI-16-335/ - http://www.securityfocus.com/bid/90520
CVE ID: CVE-2016-4497 State: PUBLISHED Published: 2016-05-12T01:00:00 Last Updated: 2024-08-06T00:32:25.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-16-334/ - https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01 - http://www.securityfocus.com/bid/90523
CVE ID: CVE-2016-4498 State: PUBLISHED Published: 2016-05-12T01:00:00 Last Updated: 2024-08-06T00:32:25.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90521 - https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01 - http://zerodayinitiative.com/advisories/ZDI-16-332/
CVE ID: CVE-2016-4499 State: PUBLISHED Published: 2016-05-12T01:00:00 Last Updated: 2024-08-06T00:32:25.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-16-330/ - http://www.securityfocus.com/bid/90522 - http://zerodayinitiative.com/advisories/ZDI-16-331/ - https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01
CVE ID: CVE-2016-4500 State: PUBLISHED Published: 2016-06-01T15:00:00 Last Updated: 2024-08-06T00:32:25.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-152-01
CVE ID: CVE-2016-4501 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-06T00:32:25.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01
CVE ID: CVE-2016-4502 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-06T00:32:25.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01
CVE ID: CVE-2016-4503 State: PUBLISHED Published: 2016-07-12T01:00:00 Last Updated: 2024-08-06T00:32:25.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-189-02 - http://www.securityfocus.com/bid/91670
CVE ID: CVE-2016-4504 State: PUBLISHED Published: 2017-03-21T16:00:00 Last Updated: 2024-08-06T00:32:25.717Z Vendors: n/a Products: Meteocontrol WEB'log Problem Types: CSRF Description: A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. There is no CSRF Token generated per page or per function. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01
CVE ID: CVE-2016-4505 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-06T00:32:25.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-140-01
CVE ID: CVE-2016-4506 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-06T00:32:25.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-140-01
CVE ID: CVE-2016-4507 State: PUBLISHED Published: 2016-07-06T14:00:00 Last Updated: 2024-08-06T00:32:25.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01
CVE ID: CVE-2016-4508 State: PUBLISHED Published: 2016-07-06T14:00:00 Last Updated: 2024-08-06T00:32:25.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-187-01
CVE ID: CVE-2016-4509 State: PUBLISHED Published: 2016-07-03T14:00:00 Last Updated: 2024-08-06T00:32:25.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-182-01 - http://www.zerodayinitiative.com/advisories/ZDI-16-408 - http://www.securityfocus.com/bid/91524
CVE ID: CVE-2016-4510 State: PUBLISHED Published: 2016-06-09T10:00:00 Last Updated: 2024-08-06T00:32:25.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-404 - https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01 - http://www.securityfocus.com/bid/91077
CVE ID: CVE-2016-4511 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T00:32:25.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sensitive cleartext information by leveraging read access to the ACTConfig configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02
CVE ID: CVE-2016-4512 State: PUBLISHED Published: 2016-07-03T14:00:00 Last Updated: 2024-08-06T00:32:25.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-407 - https://ics-cert.us-cert.gov/advisories/ICSA-16-182-01 - http://www.securityfocus.com/bid/91524
CVE ID: CVE-2016-4513 State: PUBLISHED Published: 2016-06-26T01:00:00 Last Updated: 2024-08-06T00:32:25.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-173-02
CVE ID: CVE-2016-4514 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-06T00:32:25.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-168-01
CVE ID: CVE-2016-4515 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4516 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T00:32:25.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: ABB PCM600 before 2.7 improperly stores the main application password after a password change, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02
CVE ID: CVE-2016-4518 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-06T00:32:25.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message. Additional Analyst Notes: - CVE Program Container: References: - https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00301 - https://ics-cert.us-cert.gov/advisories/ICSA-16-166-02
CVE ID: CVE-2016-4519 State: PUBLISHED Published: 2016-06-25T01:00:00 Last Updated: 2024-08-06T00:32:25.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91402 - https://ics-cert.us-cert.gov/advisories/ICSA-16-175-02 - http://zerodayinitiative.com/advisories/ZDI-16-375/
CVE ID: CVE-2016-4520 State: PUBLISHED Published: 2016-07-15T16:00:00 Last Updated: 2024-08-06T00:32:25.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-196-01 - http://www.securityfocus.com/bid/91783 - http://www.schneider-electric.com/ww/en/download/document/SEVD-2016-153-01
CVE ID: CVE-2016-4521 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-06T00:32:25.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sixnet BT-5xxx and BT-6xxx M2M devices before 3.8.21 and 3.9.x before 3.9.8 have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-147-02
CVE ID: CVE-2016-4522 State: PUBLISHED Published: 2016-07-28T01:00:00 Last Updated: 2024-08-06T00:32:25.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-173-03 - http://www.securityfocus.com/bid/92135
CVE ID: CVE-2016-4523 State: PUBLISHED Published: 2016-06-09T10:00:00.000Z Last Updated: 2025-10-21T23:55:51.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01 - http://www.securityfocus.com/bid/91077 - http://www.zerodayinitiative.com/advisories/ZDI-16-405
CVE ID: CVE-2016-4524 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T00:32:25.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02
CVE ID: CVE-2016-4525 State: PUBLISHED Published: 2016-06-25T01:00:00 Last Updated: 2024-08-06T00:32:25.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01
CVE ID: CVE-2016-4526 State: PUBLISHED Published: 2016-09-19T01:00:00 Last Updated: 2024-08-06T00:32:25.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory. Additional Analyst Notes: - CVE Program Container: References: - https://library.e.abb.com/public/93e52dbfd6ab4f64aa435973ccf1b6e2/9ADB005557_ABB_SoftwareVulnerabilityHandlingAdvisory_DMPro.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-16-259-02 - http://www.securityfocus.com/bid/92980
CVE ID: CVE-2016-4527 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T00:32:25.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02
CVE ID: CVE-2016-4528 State: PUBLISHED Published: 2016-06-25T01:00:00 Last Updated: 2024-08-06T00:32:25.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01
CVE ID: CVE-2016-4529 State: PUBLISHED Published: 2016-07-15T16:00:00 Last Updated: 2024-08-06T00:32:25.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-440 - https://ics-cert.us-cert.gov/advisories/ICSA-16-196-03 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-161-01 -
s-cert.us-cert.gov/advisories/ICSA-16-196-03 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-161-01 - http://www.securityfocus.com/bid/91778
CVE ID: CVE-2016-4530 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-06T00:32:25.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and data loss) via a message. Additional Analyst Notes: - CVE Program Container: References: - https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00300 - https://ics-cert.us-cert.gov/advisories/ICSA-16-166-01
CVE ID: CVE-2016-4531 State: PUBLISHED Published: 2016-07-28T01:00:00 Last Updated: 2024-08-06T00:32:25.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-173-03 - http://www.securityfocus.com/bid/92135
CVE ID: CVE-2016-4532 State: PUBLISHED Published: 2016-06-09T10:00:00 Last Updated: 2024-08-06T00:32:25.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-403 - https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01 - http://www.securityfocus.com/bid/91077
CVE ID: CVE-2016-4533 State: PUBLISHED Published: 2016-07-12T01:00:00 Last Updated: 2024-08-06T00:32:25.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91522 - https://ics-cert.us-cert.gov/advisories/ICSA-16-189-01
CVE ID: CVE-2016-4534 State: PUBLISHED Published: 2016-05-05T18:00:00 Last Updated: 2024-08-06T00:32:25.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26485/en_US/VSE_8_8_HF1123565_release_notes.pdf - http://seclists.org/fulldisclosure/2016/Mar/13 - https://kc.mcafee.com/cor
5/en_US/VSE_8_8_HF1123565_release_notes.pdf - http://seclists.org/fulldisclosure/2016/Mar/13 - https://kc.mcafee.com/corporate/index?page=content&id=SB10158 - https://lab.mediaservice.net/advisory/2016-01-mcafee.txt - https://www.exploit-db.com/exploits/39531/ - http://packetstormsecurity.com/files/download/136089/mcafeevses-bypass.html - http://www.securitytracker.com/id/1035754
CVE ID: CVE-2016-4535 State: PUBLISHED Published: 2016-05-05T18:00:00Z Last Updated: 2024-09-16T17:34:29.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted packed executable. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=817 - http://packetstormsecurity.com/files/136907/McAfee-Relocation-Processing-Memory-Corruption.html - https://www.exploit-db.com/exploits/39770/
CVE ID: CVE-2016-4536 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-06T00:32:25.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes, and (4) ListAddrByAttributes structures, which might allow remote attackers to obtain sensitive memory information by leveraging access to RPC call traffic. Additional Analyst Notes: - CVE Program Container: References: - https://www.openafs.org/pages/security/OPENAFS-SA-2016-002.txt - https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17 - https://lists.openafs.org/pipermail/openafs-
-2016-002.txt - https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17 - https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html
CVE ID: CVE-2016-4537 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/