Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/errata/RHSA-2016-2107.html - https://access.redhat.com/errata/RHSA-2017:0372 - https://bto.bluecoat.com/security-advisory/sa134 - http://www.openwall.com/lists/oss-security/2016/10/10/15 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - https://bugzilla.redhat.com/show_bug.cgi?id=1375944 - https://patchwork.ozlabs.org/patch/680412/ - http://rhn.redhat.com/errata/RHSA-2016-2047.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://rhn.redhat.com/errata/RHSA-2016-2110.html - http://www.securityfocus.com/bid/93476
CVE ID: CVE-2016-7040 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T01:50:47.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93893 - http://rhn.redhat.com/errata/RHSA-2016-1996.html
CVE ID: CVE-2016-7041 State: PUBLISHED Published: 2018-09-10T16:00:00 Last Updated: 2024-08-06T01:50:47.438Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Drools Workbench Problem Types: CWE-22 Description: Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2937.html - http://rhn.redhat.com/errata/RHSA-2016-2938.html - http://www.securityfocus.com/bid/94566 - http://rhn.redhat.com/err
- http://rhn.redhat.com/errata/RHSA-2016-2938.html - http://www.securityfocus.com/bid/94566 - http://rhn.redhat.com/errata/RHSA-2016-2822.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7041 - http://www.securitytracker.com/id/1037406 - http://rhn.redhat.com/errata/RHSA-2016-2823.html
CVE ID: CVE-2016-7042 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T01:50:47.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protector is enabled, uses an incorrect buffer size for certain timeout data, which allows local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-01-01.html - https://bugzilla.redhat.com/show_bug.cgi?id=1373966 - http://www.openwal
android.com/security/bulletin/2017-01-01.html - https://bugzilla.redhat.com/show_bug.cgi?id=1373966 - http://www.openwall.com/lists/oss-security/2016/10/13/5 - https://access.redhat.com/errata/RHSA-2017:2669 - http://rhn.redhat.com/errata/RHSA-2017-0817.html - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - http://www.securityfocus.com/bid/93544
CVE ID: CVE-2016-7043 State: PUBLISHED Published: 2019-05-15T15:46:17 Last Updated: 2024-08-06T01:50:47.418Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: KIE Products: kie-server Problem Types: CWE-260 Description: It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7043 - https://github.com/kiegroup/droolsjbpm-integration/pull/1273
CVE ID: CVE-2016-7044 State: PUBLISHED Published: 2016-09-27T15:00:00 Last Updated: 2024-08-06T01:50:47.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3672 - https://irssi.org/security/irssi_sa_2016.txt - http://www.securitytracker.com/id/1036868 - http://www.ubuntu.com/usn/USN-3086-1
CVE ID: CVE-2016-7045 State: PUBLISHED Published: 2016-09-27T15:00:00 Last Updated: 2024-08-06T01:50:47.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3672 - https://irssi.org/security/irssi_sa_2016.txt - http://www.securitytracker.com/id/1036868 - http://www.ubuntu.com/usn/USN-3086-1
CVE ID: CVE-2016-7046 State: PUBLISHED Published: 2016-10-03T21:00:00 Last Updated: 2024-08-06T01:50:47.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2640.html - https://access.redhat.com/errata/RHSA-2017:3458 - http://rhn.redhat.com/errata/RHSA-2016-2642.html - https://access.redhat.com/errata/RHSA-2017:3455 - http://rhn.redhat.com/errata/RHSA-2016-2657.html - ht
2016-2642.html - https://access.redhat.com/errata/RHSA-2017:3455 - http://rhn.redhat.com/errata/RHSA-2016-2657.html - https://access.redhat.com/errata/RHSA-2017:3456 - https://bugzilla.redhat.com/show_bug.cgi?id=1376646 - https://access.redhat.com/errata/RHSA-2017:3454 - http://rhn.redhat.com/errata/RHSA-2016-2641.html - http://www.securityfocus.com/bid/93173
CVE ID: CVE-2016-7047 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-06T01:50:47.351Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: cfme Problem Types: CWE-200 Description: A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1601 - https://access.redhat.com/errata/RHSA-2017:1758 - https://bugzilla.redhat.com/show_bug
edhat.com/errata/RHSA-2017:1601 - https://access.redhat.com/errata/RHSA-2017:1758 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7047 - http://www.securityfocus.com/bid/99329
CVE ID: CVE-2016-7048 State: PUBLISHED Published: 2018-08-20T21:00:00 Last Updated: 2024-08-06T01:50:47.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote attackers to execute arbitrary code by leveraging use of HTTP to download software. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1378043 - https://www.postgresql.org/support/security/
CVE ID: CVE-2016-7049 State: REJECTED Published: 2022-07-28T16:50:48 Last Updated: 2022-07-28T16:50:48 Description: No description available.
CVE ID: CVE-2016-7050 State: PUBLISHED Published: 2017-06-08T19:00:00 Last Updated: 2024-08-06T01:50:47.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2604.html - https://bugzilla.redhat.com/show_bug.cgi?id=1378613
CVE ID: CVE-2016-7051 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T01:50:47.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FasterXML/jackson-dataformat-xml/issues/211 - http://www.securityfocus.com/bid/97688 - https://bugzilla.redhat.com/show_bug.cgi?id=1378673
CVE ID: CVE-2016-7052 State: PUBLISHED Published: 2016-09-26T19:00:00 Last Updated: 2024-08-06T01:50:47.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://www.openssl.org/news/secadv/20160926.txt - https://security.gentoo.org/glsa/201612-16 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6e629b5be45face20b
- https://security.gentoo.org/glsa/201612-16 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6e629b5be45face20b4ca71c4fcbfed78b864a2e - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.securitytracker.com/id/1036885 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.tenable.com/security/tns-2016-16 - https://kc.mcafee.com/corporate/index?page=content&id=SB10171 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://w
visory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://www.tenable.com/security/tns-2016-19 - https://bto.bluecoat.com/security-advisory/sa132 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:27.openssl.asc - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securityfocus.com/bid/93171 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
CVE ID: CVE-2016-7053 State: PUBLISHED Published: 2017-05-04T19:00:00Z Last Updated: 2024-09-16T20:52:38.446Z Vendors: OpenSSL Products: OpenSSL Problem Types: NULL pointer deference Description: In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.
andle NULL value are affected. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us - http://www.securityfocus.com/bid/94244 - https://www.openssl.org/news/secadv/20161110.txt - http://www.securitytracker.com/id/1037261
CVE ID: CVE-2016-7054 State: PUBLISHED Published: 2017-05-04T19:00:00Z Last Updated: 2024-09-17T00:30:27.920Z Vendors: OpenSSL Products: OpenSSL Problem Types: protocol error Description: In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us - http://www.securityfocus.com/bid/94238 - https://www.openssl.org/news/secadv/20161110.txt - https:
a-hpesbhf03744en_us - http://www.securityfocus.com/bid/94238 - https://www.openssl.org/news/secadv/20161110.txt - https://www.exploit-db.com/exploits/40899/ - http://www.securitytracker.com/id/1037261
CVE ID: CVE-2016-7055 State: PUBLISHED Published: 2017-05-04T20:00:00 Last Updated: 2024-08-06T01:50:46.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or repr
's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected. Additional Analyst Notes: - CVE Program Container: References: - https://
clients that chose the curve will be affected. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2185 - https://access.redhat.com/errata/RHSA-2018:2186 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://www.tenable.com/security/tns-2017-04 - https://security.gentoo.org/glsa/201702-07 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-32366
7-04 - https://security.gentoo.org/glsa/201702-07 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securityfocus.com/bid/94242 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03752en_us - https://access.redhat.com/errata/RHSA-2018:2187 - https://www.openssl.org/news/secadv/20161110.txt - http://www.securitytracker.com/id/1037261 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2016-7056 State: PUBLISHED Published: 2018-09-10T16:00:00 Last Updated: 2024-08-06T01:50:46.703Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: The OpenSSL Project Products: openssl Problem Types: CWE-385 Description: A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys. Additional Analyst Notes: - CVE Program Container: References: - https://eprint.iacr.org/2016/1195 - https://access.redhat.com/errata/RHSA-2017:1801 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=8aed2a7548362e88e84a7feb795a3a97e8395008 - https://access.redhat.com/errata/RHSA-
nssl.org/?p=openssl.git%3Ba=commit%3Bh=8aed2a7548362e88e84a7feb795a3a97e8395008 - https://access.redhat.com/errata/RHSA-2017:1413 - https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/016_libcrypto.patch.sig - http://www.securitytracker.com/id/1037575 - https://access.redhat.com/errata/RHSA-2017:1414 - https://seclists.org/oss-sec/2017/q1/52 - https://www.debian.org/security/2017/dsa-3773 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7056 - https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7056.html - http://www.securityfocus.com/bid/95375 - http://rhn.redhat.com/errata/RHSA-2017-1415.html - https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/033_libcrypto.patch.
/rhn.redhat.com/errata/RHSA-2017-1415.html - https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/033_libcrypto.patch.sig - https://security-tracker.debian.org/tracker/CVE-2016-7056 - https://access.redhat.com/errata/RHSA-2017:1802
CVE ID: CVE-2016-7057 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2016-7058 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2016-7059 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2016-7060 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T01:50:47.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensitive password information by reading the display. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97678 - https://access.redhat.com/errata/RHSA-2017:0256 - https://bugzilla.redhat.com/show_bug.cgi?id=1379909
CVE ID: CVE-2016-7061 State: PUBLISHED Published: 2018-09-10T16:00:00 Last Updated: 2024-08-06T01:50:47.561Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: EAP Problem Types: CWE-200 Description: An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0250.html - http://rhn.redhat.com/errata/RHSA-2017-0171.html - https://access.redhat.com/err
redhat.com/errata/RHSA-2017-0250.html - http://rhn.redhat.com/errata/RHSA-2017-0171.html - https://access.redhat.com/errata/RHSA-2017:3458 - http://rhn.redhat.com/errata/RHSA-2017-0244.html - http://rhn.redhat.com/errata/RHSA-2017-0172.html - http://rhn.redhat.com/errata/RHSA-2017-0246.html - https://access.redhat.com/errata/RHSA-2017:3455 - https://access.redhat.com/errata/RHSA-2017:3456 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7061 - http://www.securityfocus.com/bid/94222 - https://access.redhat.com/errata/RHSA-2017:3454 - http://rhn.redhat.com/errata/RHSA-2017-0170.html - http://rhn.redhat.com/errata/RHSA-2017-0245.html - http://rhn.redhat.com/errata/RHSA-2017-0247.html - ht
017-0170.html - http://rhn.redhat.com/errata/RHSA-2017-0245.html - http://rhn.redhat.com/errata/RHSA-2017-0247.html - http://rhn.redhat.com/errata/RHSA-2017-0173.html
CVE ID: CVE-2016-7062 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T01:50:47.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: rhscon-ceph in Red Hat Storage Console 2 x86_64 and Red Hat Storage Console Node 2 x86_64 allows local users to obtain the password as cleartext. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93796 - https://bugzilla.redhat.com/show_bug.cgi?id=1381681 - http://www.securitytracker.com/id/1037062 - https://access.redhat.com/errata/RHSA-2016:2082
CVE ID: CVE-2016-7063 State: PUBLISHED Published: 2020-07-21T16:52:17 Last Updated: 2024-08-06T01:50:47.412Z Vendors: n/a Products: pritunl-client-electron Problem Types: CWE-22 Description: A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pritunl/pritunl-client-electron/releases/tag/1.0.1116.6%2C - https://lf.lc/CVE-2016-7063.txt - https://github.com/pritunl/pritunl-client-electron/releases/tag/1.0.1116.6
CVE ID: CVE-2016-7064 State: PUBLISHED Published: 2020-07-21T16:56:29 Last Updated: 2024-08-06T01:50:46.964Z Vendors: n/a Products: pritunl-client-electron Problem Types: CWE-347 Description: A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive information leakage Additional Analyst Notes: - CVE Program Container: References: - https://lf.lc/CVE-2016-7064.txt - https://github.com/pritunl/pritunl-client-electron/releases/tag/1.0.1116.6
CVE ID: CVE-2016-7065 State: PUBLISHED Published: 2016-10-13T14:00:00 Last Updated: 2024-08-06T01:50:47.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1382534 - https://www.exploit-db.com/exploits/40842/ - http://seclists.org/fulldisclosure/2016/Nov/143 - http://www.securityfocus.com/bid/93462
CVE ID: CVE-2016-7066 State: PUBLISHED Published: 2018-09-11T14:00:00 Last Updated: 2024-08-06T01:50:47.460Z Vendors: Red Hat Products: JBoss Enterprise Application Platform Problem Types: CWE-266 Description: It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execute any arbitrary operations. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:3456 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7066
CVE ID: CVE-2016-7067 State: PUBLISHED Published: 2018-09-10T14:00:00 Last Updated: 2024-08-06T01:50:47.388Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Tildeslash Ltd. Products: monit Problem Types: CWE-352 Description: Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93953 - https://seclists.org/oss-sec/2016/q4/267 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7
yfocus.com/bid/93953 - https://seclists.org/oss-sec/2016/q4/267 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7067 - https://bitbucket.org/tildeslash/monit/commits/c6ec3820e627f85417053e6336de2987f2d863e3?at=master
CVE ID: CVE-2016-7068 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-06T01:50:47.232Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open-Xchange Products: pdns Problem Types: CWE-20 Description: An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending crafted DNS queries, which might result in a partial denial of service if the system becomes overloaded. This issue is based on the fact that the PowerDNS server parses all records present in a query regardless of whether the