Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5765 State: PUBLISHED Published: 2016-11-29T11:00:00 Last Updated: 2024-08-06T01:15:10.526Z Vendors: n/a Products: Micro Focus MSS, RWeb, ZFE, RSG 1.x, 2.x, 12.x Problem Types: Information disclosure Description: Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for the Web (RWeb) and Reflection Security Gateway (RSG) and Reflection ZFE (ZFE) allows remote unauthenticated attackers to read arbitrary files via a specially crafted URL that allows limited directory traversal. Applies to MSS 12.3 before 12.3.326 and MSS 12.2 before 12.2.342 and RSG 12.1 before 12.1.362 and RWeb 12.3 before 12.3.312 and RWeb 12.2 before 12.2.342
6 and MSS 12.2 before 12.2.342 and RSG 12.1 before 12.1.362 and RWeb 12.3 before 12.3.312 and RWeb 12.2 before 12.2.342 and RWeb 12.1 before 12.1.362 and ZFE 2.0.1 before 2.0.1.18 and ZFE 2.0.0 before 2.0.0.52 and ZFE 1.4.0 before 1.4.0.14. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/1704.html - http://www.zerodayinitiative.com/advisories/ZDI-16-618 - http://www.securityfocus.com/bid/94579
CVE ID: CVE-2016-5766 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T01:15:09.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=72339 - https://libgd.github.io/release-2.2.3.html - http://li
Container: References: - https://bugs.php.net/bug.php?id=72339 - https://libgd.github.io/release-2.2.3.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://rhn.redhat.com/errata/RHSA-2016-2598.html - http://php.net/ChangeLog-5.php - http://github.com/php/php-src/commit/7722455726bec8c53458a32851d2a87982cf0eac?w=1 - http://www.openwall.com/lists/oss-security/2016/06/23/4 - https://security.gentoo.org/glsa/201612-09 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 -
p://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://www.debian.org/security/2016/dsa-3619 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html - http://www.ubuntu.com/usn/USN-3030-1
CVE ID: CVE-2016-5767 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T01:15:08.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/o
: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://rhn.redhat.com/errata/RHSA-2016-2598.html - http://php.net/ChangeLog-5.php - http://www.openwall.com/lists/oss-security/2016/06/23/4 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://bugs.php.net/bug.php?id=72446 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html - http://www.securityfocus.com/bid/91395 - http://github.com/php/php-src/commit/c395c6e5d7e8df37a21265ff76e4
g00025.html - http://www.securityfocus.com/bid/91395 - http://github.com/php/php-src/commit/c395c6e5d7e8df37a21265ff76e48fe75ceb5ae6?w=1
CVE ID: CVE-2016-5768 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T01:15:09.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html -
/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://rhn.redhat.com/errata/RHSA-2016-2598.html - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=72402 - http://github.com/php/php-src/commit/5b597a2e5b28e2d5a52fc1be13f425f08f47cb62?w=1 - http://www.openwall.com/lists/oss-security/2016/06/23/4 - http://www.debian.org/security/2016/dsa-3618 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.co
hp - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.com/HT207170 - http://www.securityfocus.com/bid/91396
CVE ID: CVE-2016-5769 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T01:15:10.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted length value, related to the (1) mcrypt_generic and (2) mdecrypt_generic functions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.
ntainer: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html - http://github.com/php/php-src/commit/6c5211a0cef0cc2854eaa387e0eb036e012904d0?w=1 - http://php.net/ChangeLog-5.php - http://www.openwall.com/lists/oss-security/2016/06/23/4 - http://www.debian.org/security/2016/dsa-3618 - http://php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=72455 - http://www.securityfocus.com/bid/91399 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.com/HT207
tps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.com/HT207170 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html
CVE ID: CVE-2016-5770 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T01:15:10.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue to CVE-2016-5096. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.open
/2016/Sep/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html - http://github.com/php/php-src/commit/7245bff300d3fa8bacbef7897ff080a6f1c23eba?w=1 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.securityfocus.com/bid/91403 - http://php.net/ChangeLog-5.php - http://www.openwall.com/lists/oss-security/2016/06/23/4 - http://www.debian.org/security/2016/dsa-3618 - https://bugs.php.net/bug.php?id=72262 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.com/HT207170
CVE ID: CVE-2016-5771 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T01:15:10.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/php/php-src/commit/3f627e580acfdaf0595ae3b115b8bec677f203ee?w=1 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.htm
t/3f627e580acfdaf0595ae3b115b8bec677f203ee?w=1 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.php.net/bug.php?id=72433 - http://php.net/ChangeLog-5.php - http://www.openwall.com/lists/oss-security/2016/06/23/4 - http://www.debian.org/security/2016/dsa-3618 - http://www.securityfocus.com/bid/91401 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.com/HT207170
CVE ID: CVE-2016-5772 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T01:15:09.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/php/php-src/commit/a44c89e8af7c2410f4bfc5e097be2a5d0639a60c?w=1 - http://lists.apple.com/archives/security-announ
ub.com/php/php-src/commit/a44c89e8af7c2410f4bfc5e097be2a5d0639a60c?w=1 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=72340 - http://www.openwall.com/lists/oss-security/2016/06/23/4 - http://www.debian.org/security/2016/dsa-3618 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.com/HT207170 - http://www.securit
m/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.com/HT207170 - http://www.securityfocus.com/bid/91398 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html
CVE ID: CVE-2016-5773 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T01:15:09.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.org/opensu
eferences: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://github.com/php/php-src/commit/f6aef68089221c5ea047d4a74224ee3deead99a6?w=1 - https://bugs.php.net/bug.php?id=72434 - http://php.net/ChangeLog-5.php - http://www.openwall.com/lists/oss-security/2016/06/23/4 - http://www.debian.org/security/2016/dsa-3618 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://support.apple.com/HT207170 - http://www.securityfocus.com/bid/91397
CVE ID: CVE-2016-5774 State: PUBLISHED Published: 2016-07-12T19:00:00 Last Updated: 2024-08-06T01:15:08.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obtain sensitive credentials and other information via unspecified vectors, related to use of insecure cryptographic parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91455 - https://bto.bluecoat.com/security-advisory/sa127
CVE ID: CVE-2016-5781 State: PUBLISHED Published: 2016-07-12T01:00:00 Last Updated: 2024-08-06T01:15:08.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91522 - https://ics-cert.us-cert.gov/advisories/ICSA-16-189-01
CVE ID: CVE-2016-5782 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.549Z Vendors: n/a Products: Locus Energy LGate through 320 Problem Types: Locus Energy LGate Command Injection Vulnerability Description: An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320. Locus Energy meters use a PHP script to manage the energy meter parameters for voltage monitoring and network configuration. The PHP code does not properly validate information that is sent in the POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94782 - http://www.securityfo
nal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94782 - http://www.securityfocus.com/bid/94698 - https://ics-cert.us-cert.gov/advisories/ICSA-16-231-01-0
CVE ID: CVE-2016-5786 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.690Z Vendors: n/a Products: OmniMetrix OmniView 1.2 Problem Types: OmniMetrix OmniView unencrypted http Description: An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-350-02 - http://www.securityfocus.com/bid/94937
CVE ID: CVE-2016-5787 State: PUBLISHED Published: 2016-07-15T16:00:00 Last Updated: 2024-08-06T01:15:09.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 - https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 - http://www.securityfocus.com/bid/91727
CVE ID: CVE-2016-5788 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-06T01:15:10.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-252-01 - http://www.securityfocus.com/bid/93452
CVE ID: CVE-2016-5789 State: PUBLISHED Published: 2017-10-13T02:00:00 Last Updated: 2024-08-06T01:15:10.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-283-02
CVE ID: CVE-2016-5790 State: PUBLISHED Published: 2016-07-15T16:00:00 Last Updated: 2024-08-06T01:15:08.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tollgrade LightHouse SMS before 5.1 patch 3 allows remote attackers to bypass authentication and restart the software via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91728 - https://ics-cert.us-cert.gov/advisories/ICSA-16-194-01
CVE ID: CVE-2016-5791 State: PUBLISHED Published: 2017-10-13T02:00:00 Last Updated: 2024-08-06T01:15:10.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could provide an undocumented BusyBox Linux shell accessible over the TELNET service without any authentication. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-283-02
CVE ID: CVE-2016-5792 State: PUBLISHED Published: 2016-08-08T00:00:00 Last Updated: 2024-08-06T01:15:09.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-463 - http://www.securityfocus.com/bid/92262 - https://ics-cert.us-cert.gov/advisories/ICSA-16-215-01
CVE ID: CVE-2016-5793 State: PUBLISHED Published: 2016-09-24T10:00:00 Last Updated: 2024-08-06T01:15:09.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-264-01 - http://www.securityfocus.com/bid/93046
CVE ID: CVE-2016-5794 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-5795 State: PUBLISHED Published: 2017-08-31T21:00:00 Last Updated: 2024-08-06T01:15:10.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100558 - https://ics-cert
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100558 - https://ics-cert.us-cert.gov/advisories/ICSA-17-150-01
CVE ID: CVE-2016-5796 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.748Z Vendors: n/a Products: Fatek Automation Designer 2.1.2.2 Problem Types: Fatek Automation Designer Memory Corruption Vulnerabilities Description: An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a Memory Buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93105 - https://ics-cert.us-cert.gov/ad
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93105 - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-06
CVE ID: CVE-2016-5797 State: PUBLISHED Published: 2016-07-15T16:00:00 Last Updated: 2024-08-06T01:15:09.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91728 - https://ics-cert.us-cert.gov/advisories/ICSA-16-194-01
CVE ID: CVE-2016-5798 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.757Z Vendors: n/a Products: Fatek Automation Designer 2.1.2.2 Problem Types: Fatek Automation Designer buffer overflow Description: An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow on the Fatek Communication Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93105 - https://ics-cert.us-cert.go
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93105 - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-06
CVE ID: CVE-2016-5799 State: PUBLISHED Published: 2016-08-24T01:00:00 Last Updated: 2024-08-06T01:15:08.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 - http://www.securityfocus.com/bid/92606
CVE ID: CVE-2016-5800 State: PUBLISHED Published: 2019-03-21T13:56:42 Last Updated: 2024-08-06T01:15:10.834Z Vendors: Fatek Products: Automation PM Designer V3, Automation FV Designer Problem Types: CWE-121 Description: A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-06
CVE ID: CVE-2016-5801 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.767Z Vendors: n/a Products: OmniMetrix OmniView 1.2 Problem Types: OmniMetrix OmniView Insufficient password requirements Description: An issue was discovered in OmniMetrix OmniView, Version 1.2. Insufficient password requirements for the OmniView web application may allow an attacker to gain access by brute forcing account passwords. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-350-02 - http://www.securityfocus.com/bid/94937