Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7754 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7755 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7756 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7757 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7758 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7759 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:55.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10 is affected. The issue involves the "Springboard" component, which allows physically proximate attackers to obtain sensitive information by viewing application snapshots in the Task Switcher. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207143
CVE ID: CVE-2016-7760 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7761 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:55.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "WiFi" component, which allows local users to obtain sensitive network-configuration information by leveraging global storage. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207423
CVE ID: CVE-2016-7762 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:56.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "WebKit" component, which allows XSS attacks against Safari. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207422
CVE ID: CVE-2016-7763 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7764 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7765 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T02:04:56.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Clipboard" component, which allows physically proximate attackers to obtain sensitive information in the lockscreen state by viewing clipboard contents. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207422
CVE ID: CVE-2016-7766 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7767 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7768 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7769 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7770 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7771 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7772 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7773 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7774 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7775 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7777 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T02:04:55.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX217363 - http://xenbits.xen.org/xsa/advisory-190.html - http://www.securityfocus.com/bid/93344 - https://security.gentoo.org/glsa/201611-09 -
ts.xen.org/xsa/advisory-190.html - http://www.securityfocus.com/bid/93344 - https://security.gentoo.org/glsa/201611-09 - http://www.securitytracker.com/id/1036942
CVE ID: CVE-2016-7780 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:04:56.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/a8efd9ca71fc9b8b843ad0910d435d237482ee31 - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/97208
CVE ID: CVE-2016-7781 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:04:56.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the author parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - https://github.com/exponentcms/exponent-cms/commit/fdafb5ec97838e4edbd685f587f28d3174ebb3db - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/9720
7838e4edbd685f587f28d3174ebb3db - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/97206
CVE ID: CVE-2016-7782 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:04:56.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the src parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97210 - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - http://seclists.org/fulldisclosure/2016/Nov/12
CVE ID: CVE-2016-7783 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:04:56.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/97212
CVE ID: CVE-2016-7784 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:04:56.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/97232 - https://github.com/exponentcms/e
tp://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/97232 - https://github.com/exponentcms/exponent-cms/commit/1965e3719986406576898668855b8afbab43ed2c
CVE ID: CVE-2016-7785 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T02:04:56.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/08/1 - https://security.gentoo.org/glsa/201701-71 - http://www.securityfocus.com/bid/94833
CVE ID: CVE-2016-7786 State: PUBLISHED Published: 2017-04-07T21:00:00 Last Updated: 2024-08-06T02:04:56.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference, as demonstrated by a request for Licenseinformation.jsp. This is fixed in 10.6.5. Additional Analyst Notes: - CVE Program Container: References: - https://infosecninja.blogspot.in/2017/04/cve-2016-7786-sophos-cyberoam-utm.html - https://www.exploit-db.com/exploits/44469/
CVE ID: CVE-2016-7787 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T02:04:56.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-10/msg00031.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00034.html - http://www.securityfocus.com/bid/93224 - http://www.openwall.com/lists/oss-security/2016/09/29/7
CVE ID: CVE-2016-7788 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:04:56.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - https://github.com/exponentcms/exponent-cms/commit/fdafb5ec97838e4edbd685f587f28d3174ebb3db - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/97233
CVE ID: CVE-2016-7789 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:04:56.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the apikey parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97235 - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - http://seclists.org/fulldisclosure/2016/Nov/12 - http://forums.exponentcms.org/index.php?p=/discussion/comment/1591#Comment_1591
CVE ID: CVE-2016-7790 State: PUBLISHED Published: 2017-01-12T22:00:00 Last Updated: 2024-08-06T02:04:56.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php' file to the website through uploader_paste.php, then overwrite /framework/conf/config.php, which leads to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/22/6 - http://www.securityfocus.com/bid/93119
CVE ID: CVE-2016-7791 State: PUBLISHED Published: 2017-01-12T22:00:00 Last Updated: 2024-08-06T02:04:56.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an evil 'exploit.tar.gz' file to the website, then extract it by visiting '/install/index.php?install_sample=../../files/exploit', which leads to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/29/11 - http://www.securityfocus.com/bid/93119
CVE ID: CVE-2016-7792 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:04:56.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubiquiti Networks UniFi 5.2.7 does not restrict access to the database, which allows remote attackers to modify the database by directly connecting to it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93270 - https://packetstormsecurity.com/files/138928/Ubiquiti-UniFi-AP-AC-Lite-5.2.7-Improper-Access-Control.html
CVE ID: CVE-2016-7793 State: PUBLISHED Published: 2017-01-19T20:00:00 Last Updated: 2024-08-06T02:04:55.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/30/2 - http://www.securityfocus.com/bid/93249 - https://github.com/sociomantic-tsunami/git-hub/issues/197
CVE ID: CVE-2016-7794 State: PUBLISHED Published: 2017-01-19T20:00:00 Last Updated: 2024-08-06T02:04:55.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/30/2 - http://www.securityfocus.com/bid/93249 - https://github.com/sociomantic-tsunami/git-hub/issues/197
CVE ID: CVE-2016-7795 State: PUBLISHED Published: 2016-10-13T14:00:00 Last Updated: 2024-08-06T02:04:56.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/30/1 - http://www.openwall.com/lists/oss-security/2016/09/28/9 - http://www.securityfocus.com/bid/93223 - http://rhn.redhat.com/errata/RHSA-2016-2610.html - https://www.agwa.name/blog/post/how_to_crash_syst
cus.com/bid/93223 - http://rhn.redhat.com/errata/RHSA-2016-2610.html - https://www.agwa.name/blog/post/how_to_crash_systemd_in_one_tweet - http://www.ubuntu.com/usn/USN-3094-1 - https://github.com/systemd/systemd/issues/4234 - http://www.securitytracker.com/id/1037320 - http://rhn.redhat.com/errata/RHSA-2016-2694.html
CVE ID: CVE-2016-7796 State: PUBLISHED Published: 2016-10-13T14:00:00 Last Updated: 2024-08-06T02:04:56.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/30/1 - https://www.agwa.name/blog/post/how_to_crash_systemd_in_one_tweet - https://github.com/systemd/systemd/issues/4234#issuecomment-250441246 - http://lists.open
o_crash_systemd_in_one_tweet - https://github.com/systemd/systemd/issues/4234#issuecomment-250441246 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00015.html - https://bugzilla.redhat.com/show_bug.cgi?id=1381911 - http://rhn.redhat.com/errata/RHSA-2017-0003.html - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00016.html - http://www.securitytracker.com/id/1037320 - http://www.securityfocus.com/bid/93250 - https://rhn.redhat.com/errata/RHBA-2015-2092.html
CVE ID: CVE-2016-7797 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T02:04:56.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2578.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00077.html - http://www.openwall.com/lists/oss-security/2016/10/01/1 - http://bugs.clusterlabs.org/show_bug.cgi?id=5269 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00001.ht
p://bugs.clusterlabs.org/show_bug.cgi?id=5269 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00001.html - https://github.com/ClusterLabs/pacemaker/commit/5ec24a2642bd0854b884d1a9b51d12371373b410 - http://www.securityfocus.com/bid/93261 - http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00038.html
CVE ID: CVE-2016-7798 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T02:04:56.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/30/6 - https://www.debian.org/security/2017/dsa-3966 - https://github.com/ruby/openssl/commit/8108e0a6db133f3375608303fdd2083eb5115062 - http://www.openwall.com/lists/oss-security/2016/10/01
com/ruby/openssl/commit/8108e0a6db133f3375608303fdd2083eb5115062 - http://www.openwall.com/lists/oss-security/2016/10/01/2 - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - http://www.openwall.com/lists/oss-security/2016/09/19/9 - http://www.securityfocus.com/bid/93031 - https://github.com/ruby/openssl/issues/49
CVE ID: CVE-2016-7799 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:04:56.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201611-21 - http://www.securityfocus.com/bid/93264 - http://www.openwall.com/lists/oss-security/2016/10/01/4 - http://www.openwall.com/lists/oss-security/2016/10/01/6 - https://github.com/ImageMagick/ImageMagick/issues/280 - https://github.com/ImageMagick/ImageMagick/commit/a7bb158b7bedd1
https://github.com/ImageMagick/ImageMagick/issues/280 - https://github.com/ImageMagick/ImageMagick/commit/a7bb158b7bedd1449a34432feb3a67c8f1873bfa - http://www.debian.org/security/2016/dsa-3726
CVE ID: CVE-2016-7800 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-06T02:04:55.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/code/ci/5c7b6d6094a25e99c57f8b18343914ebfd8213ef/ - http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.openwall.com/lists/oss-security/2016/10/01/7 - http://
.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.openwall.com/lists/oss-security/2016/10/01/7 - http://www.securityfocus.com/bid/93262 - http://www.debian.org/security/2016/dsa-3746 - http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html - https://bugzilla.redhat.com/show_bug.cgi?id=1381148 - http://www.securityfocus.com/bid/96135
CVE ID: CVE-2016-7801 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.026Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN14631222/index.html - http://www.securityfocus.com/bid/94966 - https://support.cybozu.com/ja-jp/article/9437
CVE ID: CVE-2016-7802 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9561 - https://jvn.jp/en/jp/JVN16200242/index.html - http://www.securityfocus.com/bid/94967
CVE ID: CVE-2016-7803 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.031Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: SQL Injection Description: SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94974 - https://jvn.jp/en/jp/JVN17980240/index.html - https://support.cybozu.com/ja-jp/article/9447
CVE ID: CVE-2016-7804 State: PUBLISHED Published: 2017-05-22T16:00:00 Last Updated: 2024-08-06T02:04:56.045Z Vendors: Igor Pavlov Products: 7 Zip for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000211 - https://jvn.jp/en/jp/JVN76780067/index.html - http://www.7-zip.org/history.txt
CVE ID: CVE-2016-7805 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.113Z Vendors: Nihon Unisys, Ltd. Products: mobiGate App for Android, mobiGate App for iOS Problem Types: Fails to verify SSL certificates Description: The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94085 - https://jvn.jp/en/jp/JVN27260483/index.html