Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6145 State: PUBLISHED Published: 2016-08-05T14:00:00 Last Updated: 2024-08-06T01:22:20.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked when the detailed_error_on_connect option is not supported or is configured as "False," which allows remote attackers to enumerate database users via a series of login attempts, aka SAP Security Note 2216869. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92346 - https://www.onapsis.com/blog/onapsis-publishes
Program Container: References: - http://www.securityfocus.com/bid/92346 - https://www.onapsis.com/blog/onapsis-publishes-15-advisories-sap-hana-and-building-components - http://seclists.org/fulldisclosure/2016/Aug/92 - http://packetstormsecurity.com/files/138444/SAP-HANA-DB-1.00.091.00.1418659308-Information-Disclosure.html - https://www.onapsis.com/research/security-advisories/sap-hana-user-information-disclosure
CVE ID: CVE-2016-6146 State: PUBLISHED Published: 2016-09-27T15:00:00 Last Updated: 2024-08-06T01:22:20.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226. Additional Analyst Notes: - CVE Program Container: References: - http://onapsis.com/research/security-advisories/sap-trex-tns-information-disclosure-nameserver - http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review - https://layersevensecurity.com/wp-content/uploads/2016/03/Layer-Seven-Security_SAP-Security-Notes_February-2016.
eview - https://layersevensecurity.com/wp-content/uploads/2016/03/Layer-Seven-Security_SAP-Security-Notes_February-2016.pdf - http://packetstormsecurity.com/files/138445/SAP-TREX-7.10-Revision-63-NameServer-TNS-Information-Disclosure.html - http://seclists.org/fulldisclosure/2016/Aug/93
CVE ID: CVE-2016-6147 State: PUBLISHED Published: 2016-08-05T14:00:00 Last Updated: 2024-08-06T01:22:19.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors, aka SAP Security Note 2234226. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92066 - https://www.onapsis.com/blog/analyzing-sap-security-notes-february-2016 - http://seclists.org/fulldisclosure/2016/Aug/94 - http://packetstormsecurity.com/files/138446/SAP-TREX-7.10-Revision-63-Remote-Command-Execution.html - https://www
g/94 - http://packetstormsecurity.com/files/138446/SAP-TREX-7.10-Revision-63-Remote-Command-Execution.html - https://www.onapsis.com/research/security-advisories/sap-trex-remote-command-execution-0
CVE ID: CVE-2016-6148 State: PUBLISHED Published: 2016-08-05T14:00:00 Last Updated: 2024-08-06T01:22:20.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement, aka SAP Security Note 2233136. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/138450/SAP-HANA-DB-1.00.73.00.389160-Remote-Code-Execution.html - https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016 - https://layersevensecurity.com/wp-content/uploads/2016/02/Layer-Seven-Security_SAP-Se
-sap-security-notes-january-2016 - https://layersevensecurity.com/wp-content/uploads/2016/02/Layer-Seven-Security_SAP-Security-Notes_January-2016.pdf - http://seclists.org/fulldisclosure/2016/Aug/95 - http://www.securityfocus.com/bid/92067
CVE ID: CVE-2016-6149 State: PUBLISHED Published: 2016-08-05T14:00:00 Last Updated: 2024-08-06T01:22:19.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Aug/108 - http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.1418659308-EXPORT-Information-Disclosure.html - https://www.onapsis.com/research/security-advisories/sap-hana-information-disclosure-export - https://www.onapsis.com/blog/analy
www.onapsis.com/research/security-advisories/sap-hana-information-disclosure-export - https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016 - http://www.securityfocus.com/bid/92061 - http://seclists.org/fulldisclosure/2016/Aug/97
CVE ID: CVE-2016-6150 State: PUBLISHED Published: 2016-08-05T14:00:00 Last Updated: 2024-08-06T01:22:20.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended access restrictions and possibly have unspecified other impact via unknown vectors, aka SAP Security Note 2233550. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Aug/96 - http://www.securityfocus.com/bid/92064 - https://layersevensecurity.com/wp-content/uploads/2016/02/Layer-Seven-Security_SAP-Security-Notes_January-2016.pdf
64 - https://layersevensecurity.com/wp-content/uploads/2016/02/Layer-Seven-Security_SAP-Security-Notes_January-2016.pdf - http://packetstormsecurity.com/files/138453/SAP-HANA-DB-Encryption-Issue.html - https://www.onapsis.com/research/security-advisories/sap-hana-potential-wrong-encryption
CVE ID: CVE-2016-6151 State: PUBLISHED Published: 2016-07-26T01:00:00 Last Updated: 2024-08-06T01:22:20.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160721-01-security-notice-for-ca-ehealth.aspx - http://www.securitytracker.com/id/1036433 - http://www.securityfocus.com/bid/92107
CVE ID: CVE-2016-6152 State: PUBLISHED Published: 2016-07-26T01:00:00 Last Updated: 2024-08-06T01:22:20.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160721-01-security-notice-for-ca-ehealth.aspx - http://www.securitytracker.com/id/1036433 - http://www.securityfocus.com/bid/92107
CVE ID: CVE-2016-6153 State: PUBLISHED Published: 2016-09-26T00:00:00 Last Updated: 2024-08-06T01:22:20.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00053.html - https://www.sqlite.org/releaselog/3_13_0
ns-2016-20 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00053.html - https://www.sqlite.org/releaselog/3_13_0.html - http://www.openwall.com/lists/oss-security/2016/07/01/2 - http://www.securityfocus.com/bid/91546 - http://www.sqlite.org/cgi/src/info/67985761aa93fb61 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGQTH7V45QVHFDXJAEECHEO3HHD644WZ/ - https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt - http://www.openwall.com/lists/oss-security/2016/07/01/1 - https://usn.ubuntu.com/4019-1/ - https://usn.ubuntu.com/4019-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mess
//usn.ubuntu.com/4019-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00022.html
CVE ID: CVE-2016-6154 State: PUBLISHED Published: 2019-08-23T21:06:51 Last Updated: 2024-08-06T01:22:20.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect). Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-1.com/blog/2016/sec-1-advisory-reflected-cross-site-scripting-open-redirect-watchguard-fireware-v11-11
CVE ID: CVE-2016-6156 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T01:22:20.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ec_device_ioctl_xcmd function in drivers/platform/chrome/cros_ec_dev.c in the Linux kernel before 4.7 allows local users to cause a denial of service (out-of-bounds array access) by changing a certain size value, aka a "double fetch" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096cdc6f52225835ff503f987a0d68ef770bb78e - https://bugzilla.kernel.org/show_bug.cgi?id=120131 - https://github.com/torvald
6cdc6f52225835ff503f987a0d68ef770bb78e - https://bugzilla.kernel.org/show_bug.cgi?id=120131 - https://github.com/torvalds/linux/commit/096cdc6f52225835ff503f987a0d68ef770bb78e - http://www.securityfocus.com/bid/91553 - https://bugzilla.redhat.com/show_bug.cgi?id=1353490 - http://seclists.org/bugtraq/2016/Jul/20
CVE ID: CVE-2016-6158 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:22:19.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that (1) restore factory settings or (2) reboot the device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-ws331a-en
CVE ID: CVE-2016-6159 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:22:20.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentication and obtain administrative access by sending "special packages" to the LAN interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-ws331a-en
CVE ID: CVE-2016-6160 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:22:20.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service (segmentation fault) via a large frame, a related issue to CVE-2017-14266. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829350 - http://www.openwall.com/lists/oss-security/2016/07/05/3 - https://github.com/appneta/tcpreplay/issues/251
CVE ID: CVE-2016-6161 State: PUBLISHED Published: 2016-08-12T15:00:00 Last Updated: 2024-08-06T01:22:20.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html - https://github.com/libgd/libgd/issues/209 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html - http://www.openwall.com/lists/oss-security/2016/07/05/6 - http://www.openwall.com/lists/oss-security/2016/07/05/7 - htt
http://www.openwall.com/lists/oss-security/2016/07/05/6 - http://www.openwall.com/lists/oss-security/2016/07/05/7 - http://www.debian.org/security/2016/dsa-3619 - http://www.ubuntu.com/usn/USN-3030-1
CVE ID: CVE-2016-6162 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T01:22:20.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/core/skbuff.c in the Linux kernel 4.7-rc6 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via certain IPv6 socket operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/05/8 - https://bugzilla.redhat.com/show_bug.cgi?id=1353538
CVE ID: CVE-2016-6163 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T01:22:20.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/05/9 - http://www.openwall.com/lists/oss-security/2016/07/04/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1353520
CVE ID: CVE-2016-6164 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:22:20.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit%3Bh=8a3221cc67a516dfc1700bdae3566ec52c7ee823 - http://www.securityfocus.com/bid/95862 - https://www.ffmpeg.org/security.html
CVE ID: CVE-2016-6167 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T01:22:20.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/137742/Putty-Beta-0.67-DLL-Hijacking.html - http://www.securitytracker.com/id/1036236 - http://www.securityfocus.com/archive/1/538848/100/0/threaded
CVE ID: CVE-2016-6168 State: PUBLISHED Published: 2018-02-07T17:00:00 Last Updated: 2024-08-06T01:22:20.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://fortiguard.com/zeroday/FG-VD-16-021
CVE ID: CVE-2016-6169 State: PUBLISHED Published: 2018-02-07T17:00:00 Last Updated: 2024-08-06T01:22:20.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-16-018 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2016-6170 State: PUBLISHED Published: 2016-07-06T14:00:00 Last Updated: 2024-08-06T01:22:20.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message. Additional Analyst Notes: - CVE Program Container: References: - https://lists.dns-oarc.net/pipermail/dns-ope
E message. Additional Analyst Notes: - CVE Program Container: References: - https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015075.html - https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015073.html - http://www.openwall.com/lists/oss-security/2016/07/06/3 - http://www.securitytracker.com/id/1036241 - https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html - https://security.gentoo.org/glsa/201610-07 - https://kb.isc.org/article/AA-01390 - http://www.securityfocus.com/bid/91611 - https://github.com/sischkg/xfer-limit/blob/master/README.md - https://kb.isc.org/article/AA-01390/169/CVE-2016-6170 - https://bugzilla.redhat.com/show_bug.cgi?id=1353563
CVE ID: CVE-2016-6171 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T01:22:20.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion and slave server crash) via a large zone transfer for (1) DDNS, (2) AXFR, or (3) IXFR. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/06/3 - http://www.securityfocus.com/bid/91678 - https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html - http://www.openwall.com/lists/oss-security/2016/07/06/4 - https://gitlab.labs.nic.cz/labs/knot/blob/c546a7056
058.html - http://www.openwall.com/lists/oss-security/2016/07/06/4 - https://gitlab.labs.nic.cz/labs/knot/blob/c546a70563ef4c7badb7cb5bdf6d1ba8e7adae82/NEWS - https://gitlab.labs.nic.cz/labs/knot/issues/464 - https://github.com/sischkg/xfer-limit/blob/master/README.md
CVE ID: CVE-2016-6172 State: PUBLISHED Published: 2016-09-26T16:00:00 Last Updated: 2024-08-06T01:22:20.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response. Additional Analyst Notes: - CVE Program Container: References: - https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-401 - http://www.debian.org/security/2016/dsa-3664 - http://www.securitytracker.com/id/1036242 - http://www.openwall.com/lists/oss-security/2016/07/06/3 - https://github.com/PowerDNS/pdns
uritytracker.com/id/1036242 - http://www.openwall.com/lists/oss-security/2016/07/06/3 - https://github.com/PowerDNS/pdns/issues/4128 - https://github.com/PowerDNS/pdns/issues/4133 - http://www.securityfocus.com/bid/91678 - https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html - https://github.com/PowerDNS/pdns/pull/4134 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00085.html - https://github.com/sischkg/xfer-limit/blob/master/README.md
CVE ID: CVE-2016-6173 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T01:22:20.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data. Additional Analyst Notes: - CVE Program Container: References: - https://open.nlnetlabs.nl/pipermail/nsd-users/2016-August/002342.html - http://www.openwall.com/lists/oss-security/2016/07/06/3 - http://www.securityfocus.com/bid/91678 - https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=790 - https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.
www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=790 - https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html - http://www.openwall.com/lists/oss-security/2016/07/06/4 - http://www.nlnetlabs.nl/svn/nsd/tags/NSD_4_1_11_REL/doc/RELNOTES - https://github.com/sischkg/xfer-limit/blob/master/README.md
CVE ID: CVE-2016-6174 State: PUBLISHED Published: 2016-07-12T19:00:00 Last Updated: 2024-08-06T01:22:20.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the content_class parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jul/19 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://www.exploit-db.com/exploits/40084/
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://www.exploit-db.com/exploits/40084/ - http://packetstormsecurity.com/files/137804/IPS-Community-Suite-4.1.12.3-PHP-Code-Injection.html - http://www.securityfocus.com/bid/91732 - https://support.apple.com/HT207170 - http://karmainsecurity.com/KIS-2016-11 - https://invisionpower.com/release-notes/4113-r44/
CVE ID: CVE-2016-6175 State: PUBLISHED Published: 2017-02-07T15:00:00 Last Updated: 2024-08-06T01:22:20.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header. Additional Analyst Notes: - CVE Program Container: References: - https://kmkz-web-blog.blogspot.cz/2016/07/advisory-cve-2016-6175.html - https://github.com/NagVis/nagvis/commit/4fe8672a5aec3467da72b5852ca6d283c15adb53 - https://www.exploit-db.com/exploits/40154/ - https://bugs.launchpad.net/php-gettext/+bug/1606184
CVE ID: CVE-2016-6177 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T01:22:20.771Z Vendors: n/a Products: OceanStor 5800 V3 V300R003C00 Problem Types: Integer Overflow Description: The Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System (NFS) packets, causing an anomaly in specific disk arrays. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160629-02-oceanstor-en
CVE ID: CVE-2016-6178 State: PUBLISHED Published: 2016-08-02T16:00:00 Last Updated: 2024-08-06T01:22:20.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa
ional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-multicast-ldp-fec-stack-en - http://www.securityfocus.com/bid/91772