Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8692 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1385502 - http://www.debian.org/security/2017/dsa-3785 - http://www.securityfocus.com/bid/93588 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lis
- http://www.securityfocus.com/bid/93588 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/08/23/6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/ - https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/ - https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020 - http://www.openwall.com/lists/oss-security/2016/10/16/14
CVE ID: CVE-2016-8693 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/ - http://www.securityfocus.com/bid/93587 - http://www.debian.org/security/2017/dsa-3785 - https://
6TZY5G44EFDTMWOJXJRD/ - http://www.securityfocus.com/bid/93587 - http://www.debian.org/security/2017/dsa-3785 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/08/23/6 - http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html - https://github.com/mdadams/jasper/commit/44a524e367597af58d6265ae2014468b334d0309 - https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/ - http://www.openwall.com/lists/oss-security/2016/10/16/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1385507
CVE ID: CVE-2016-8694 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8695 and CVE-2016-8696. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiple-three-null-pointer-dereference-in-bm_readbody_bmp-bitmap_io-c/ -
ttps://blogs.gentoo.org/ago/2016/08/08/potrace-multiple-three-null-pointer-dereference-in-bm_readbody_bmp-bitmap_io-c/ - http://www.openwall.com/lists/oss-security/2016/08/18/11 - http://potrace.sourceforge.net/ChangeLog
CVE ID: CVE-2016-8695 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8696. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiple-three-null-pointer-dereference-in-bm_readbody_bmp-bitmap_io-c/ -
CVE ID: CVE-2016-8696 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8695. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiple-three-null-pointer-dereference-in-bm_readbody_bmp-bitmap_io-c/ -
CVE ID: CVE-2016-8697 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bm_new function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - http://www.openwall.com/lists/oss-security/2016/08/18/11 - https://blogs.gentoo.org/ago/2016/08/08/potrace-divide-by-zero-in-bm_new-bitmap-h/
CVE ID: CVE-2016-8698 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overfl
/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c/ - http://www.openwall.com/lists/oss-security/2016/08/18/11 - http://potrace.sourceforge.net/ChangeLog
CVE ID: CVE-2016-8699 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overfl
CVE ID: CVE-2016-8700 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overfl
CVE ID: CVE-2016-8701 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8702, and CVE-2016-8703. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overfl
CVE ID: CVE-2016-8702 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8703. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overfl
CVE ID: CVE-2016-8703 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8702. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93778 - http://www.openwall.com/lists/oss-security/2016/10/16/12 - https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overfl
CVE ID: CVE-2016-8704 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T02:27:41.247Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Memcached Products: Memcached Problem Types: integer overflow Description: An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-12 - http://www.debian.org/security/2016/dsa-3704 - http://rhn.redhat.com/errata/RHSA-2016-281
ty.gentoo.org/glsa/201701-12 - http://www.debian.org/security/2016/dsa-3704 - http://rhn.redhat.com/errata/RHSA-2016-2819.html - http://www.securityfocus.com/bid/94083 - http://rhn.redhat.com/errata/RHSA-2016-2820.html - https://access.redhat.com/errata/RHSA-2017:0059 - http://www.securitytracker.com/id/1037333 - http://www.talosintelligence.com/reports/TALOS-2016-0219/
CVE ID: CVE-2016-8705 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T02:27:41.285Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Memcached Products: Memcached Problem Types: multiple integer overflows Description: Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-12 - http://www.debian.org/security/2016/dsa-3704 - http://rhn.redhat.com/errata/RHSA-201
ecurity.gentoo.org/glsa/201701-12 - http://www.debian.org/security/2016/dsa-3704 - http://rhn.redhat.com/errata/RHSA-2016-2819.html - http://www.securityfocus.com/bid/94083 - http://rhn.redhat.com/errata/RHSA-2016-2820.html - https://access.redhat.com/errata/RHSA-2017:0059 - http://www.securitytracker.com/id/1037333 - http://www.talosintelligence.com/reports/TALOS-2016-0220/
CVE ID: CVE-2016-8706 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T02:27:41.304Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Memcached Products: Memcached Problem Types: integer overflow Description: An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-12 - http://www.debian.org/security/2016/dsa-3704 - http://rhn.redhat.com/errata/RHSA-2016-2819.html - http://ww
/201701-12 - http://www.debian.org/security/2016/dsa-3704 - http://rhn.redhat.com/errata/RHSA-2016-2819.html - http://www.securityfocus.com/bid/94083 - http://www.securitytracker.com/id/1037333 - http://www.talosintelligence.com/reports/TALOS-2016-0221/
CVE ID: CVE-2016-8707 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T02:27:41.290Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: ImageMagick 7.0.3-1 Problem Types: out-of-bounds write Description: An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality. Additional Analyst Notes: - CVE Program Container: References:
r controlled TIFF that is handled by this functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94727 - http://www.debian.org/security/2017/dsa-3799 - http://www.talosintelligence.com/reports/TALOS-2016-0216/
CVE ID: CVE-2016-8708 State: REJECTED Published: 2016-12-15T21:00:00 Last Updated: 2016-12-15T20:57:01 Description: No description available.
CVE ID: CVE-2016-8709 State: PUBLISHED Published: 2017-02-10T17:00:00 Last Updated: 2024-08-06T02:27:41.278Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Nitro Products: Nitro Pro Problem Types: remote code error Description: A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96155 - http://www.talosintelligence.com/r
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96155 - http://www.talosintelligence.com/reports/TALOS-2016-0218/
CVE ID: CVE-2016-8710 State: PUBLISHED Published: 2017-01-26T21:00:00 Last Updated: 2024-08-06T02:27:41.250Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Libbpg Products: Libbpg Problem Types: integer underflow Description: An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This vulnerability can be triggered via attempting to decode a crafted BPG image using Libbpg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
de a crafted BPG image using Libbpg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95740 - http://www.talosintelligence.com/reports/TALOS-2016-0223/
CVE ID: CVE-2016-8711 State: PUBLISHED Published: 2017-02-10T17:00:00 Last Updated: 2024-08-06T02:27:41.281Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Nitro Products: Nitro Pro Problem Types: remote code error Description: A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific PDF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96155 - http://www.talosintelligence.com/reports/TALOS-2016
am Container: References: - http://www.securityfocus.com/bid/96155 - http://www.talosintelligence.com/reports/TALOS-2016-0224/
CVE ID: CVE-2016-8712 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T02:27:41.297Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: Nonce reuse Description: An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com
idle for 300 seconds. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0225/
CVE ID: CVE-2016-8713 State: PUBLISHED Published: 2017-02-10T17:00:00 Last Updated: 2024-08-06T02:27:41.279Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Nitro Products: Nitro Pro Problem Types: remote code error Description: A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96155 - http://www.talosintelligence
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96155 - http://www.talosintelligence.com/reports/TALOS-2016-0226/
CVE ID: CVE-2016-8714 State: PUBLISHED Published: 2017-03-10T10:29:00 Last Updated: 2024-08-06T02:27:41.262Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The R Project Products: R Problem Types: buffer overflow Description: An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96785 - http://www.debian.org/security/2017/dsa-
- CVE Program Container: References: - http://www.securityfocus.com/bid/96785 - http://www.debian.org/security/2017/dsa-3813 - http://www.talosintelligence.com/reports/TALOS-2016-0227/
CVE ID: CVE-2016-8715 State: PUBLISHED Published: 2017-02-28T15:00:00 Last Updated: 2024-08-06T02:27:41.248Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Iceni Products: Argus Problem Types: PDF Code Execution Description: An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide a malicious PDF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96470 - http://www.talosintelligence.com/reports/TA
VE Program Container: References: - http://www.securityfocus.com/bid/96470 - http://www.talosintelligence.com/reports/TALOS-2016-0228/
CVE ID: CVE-2016-8716 State: PUBLISHED Published: 2017-04-12T19:00:00 Last Updated: 2024-08-06T02:27:41.291Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: Cleartext Transmission vulnerabilty Description: An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepting this traffic is able to obtain valid credentials. Additiona
e password in cleartext. An attacker capable of intercepting this traffic is able to obtain valid credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0230
CVE ID: CVE-2016-8717 State: PUBLISHED Published: 2018-04-02T17:00:00Z Last Updated: 2024-09-16T17:09:11.126Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Talos Products: Moxa Problem Types: credentials vulnerability Description: An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged (root) account with hard-coded credentials, giving attackers full control of affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0231
CVE ID: CVE-2016-8718 State: PUBLISHED Published: 2017-04-12T19:00:00 Last Updated: 2024-08-06T02:27:41.285Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: XSS Description: An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authentic request. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosin
be treated as an authentic request. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0232/
CVE ID: CVE-2016-8719 State: PUBLISHED Published: 2017-04-12T19:00:00 Last Updated: 2024-08-06T02:27:41.423Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: XSS Description: An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multiple parameters, can cause a malicious scripts to be executed by a victim. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0
. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0233/
CVE ID: CVE-2016-8720 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T02:27:41.299Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Moxa Products: AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Problem Types: HTTP Header Injection vulnerabilty Description: An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted HTTP request can inject a payload in the bkpath parameter which will be copied in to Location header of the HTTP response. Additional Analyst Notes: - CVE Program Container: Refere
ich will be copied in to Location header of the HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0234/