Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7428 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:57:47.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - https://usn.ubuntu.com/3707-2/ - http://support.ntp.org/bin/view/Main/NtpBug3113 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us - http://support.ntp.org/bin/vi
//support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - http://www.securityfocus.com/bid/94446 - https://www.kb.cert.org/vuls/id/633847 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
CVE ID: CVE-2016-7429 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:57:47.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - http://rhn.redhat.com/errata/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/Se
Id=emr_na-hpesbux03706en_us - http://rhn.redhat.com/errata/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - https://www.kb.cert.org/vuls/id/633847 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - http://www.securityfocus.com/bid/94453 - http://support.ntp.org/bin/view/Main/NtpBug3072
CVE ID: CVE-2016-7431 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:57:47.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us - http://www.securityfocus.com/bid/94454 - http://support.ntp.org/bin/vi
?docLocale=en_US&docId=emr_na-hpesbhf03883en_us - http://www.securityfocus.com/bid/94454 - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - https://www.kb.cert.org/vuls/id/633847 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc - http://support.ntp.org/bin/view/Main/NtpBug3102 - http://www.securityfocus.com/archive/1/540254/100/0/threaded - htt
c - http://support.ntp.org/bin/view/Main/NtpBug3102 - http://www.securityfocus.com/archive/1/540254/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded - http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03899en_us - http://www.ubuntu.com/usn/USN-3349-1 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03883en_us - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/ - http://www.securi
roadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/ - http://www.securityfocus.com/archive/1/539955/100/0/threaded - http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html - http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2016-7433 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:57:47.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion." Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - http://rhn.redhat.com/errata/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/
ta/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - https://www.kb.cert.org/vuls/id/633847 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - http://www.securityfocus.com/bid/94455 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc - http://support.ntp.org/bin/view/Main/NtpBug3067 - http://www.securityfocus.com/archive/1/540254/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded - http://lists.opensuse.org/opensuse-updates/2016-12/m
//www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded - http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html - http://www.ubuntu.com/usn/USN-3349-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PABKEYX6ABBFJZGMXKH57X756EJUDS3C/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5E3XBBCK5IXOLDAH2E4M3QKIYIHUMMP/ - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMSYVQMMF37MANYEO7KBHOPSC74EKGN/ - https://www.broadcom.com/support/fibre-chann
ounce%40lists.fedoraproject.org/message/ILMSYVQMMF37MANYEO7KBHOPSC74EKGN/ - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227/ - http://www.securityfocus.com/archive/1/539955/100/0/threaded - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227 - http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2016-7434 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:57:47.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - http://www.securityfocus.com/bid/94448 - http://support.ntp.org/bin/view/Main/NtpBug3082 - https://www.exploit-db.com/exploits/40806/ - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.
oit-db.com/exploits/40806/ - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - https://www.kb.cert.org/vuls/id/633847 - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
CVE ID: CVE-2016-7435 State: PUBLISHED Published: 2016-10-05T16:00:00 Last Updated: 2024-08-06T01:57:47.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP Netweaver 7.40 SP 12 allow remote authenticated users with certain permissions to execute arbitrary commands via vectors involving a CALL 'SYSTEM' statement, aka SAP Security Note 2260344. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Oct/1 - http://seclists.org/fulldisclosure/2016/Oct/0 - https://www.onapsis.com/research/security-adv
ulldisclosure/2016/Oct/1 - http://seclists.org/fulldisclosure/2016/Oct/0 - https://www.onapsis.com/research/security-advisories/sap-os-command-injection-sctcrefreshcheckenv - https://www.onapsis.com/research/security-advisories/sap-os-command-injection-sctcrefreshexporttabcomp - https://www.onapsis.com/research/security-advisories/sap-os-command-injection-sctctmsmaintainalog - http://www.securityfocus.com/bid/93272 - http://seclists.org/fulldisclosure/2016/Oct/2 - https://www.onapsis.com/blog/analyzing-sap-security-notes-march-2016
CVE ID: CVE-2016-7437 State: PUBLISHED Published: 2016-10-13T14:00:00 Last Updated: 2024-08-06T01:57:47.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as non-critical, which might allow local users to hide rejected attempts to execute RFC function callbacks by leveraging filtering of non-critical events in audit analysis reports, aka SAP Security Note 2252312. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93503 - https://www.onapsis.com/research/security-advisories/sap-business-objects-memory-corruption-0 - http://seclists.org/fulldi
tps://www.onapsis.com/research/security-advisories/sap-business-objects-memory-corruption-0 - http://seclists.org/fulldisclosure/2016/Oct/53
CVE ID: CVE-2016-7438 State: PUBLISHED Published: 2016-12-13T16:00:00 Last Updated: 2024-08-06T01:57:47.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences. Additional Analyst Notes: - CVE Program Container: References: - https://wolfssl.com/wolfSSL/Blog/Entries/2016/9/26_wolfSSL_3.9.10_Vulnerability_Fixes.html - http://www.securityfocus.com/bid/95066
CVE ID: CVE-2016-7439 State: PUBLISHED Published: 2016-12-13T16:00:00 Last Updated: 2024-08-06T01:57:47.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences. Additional Analyst Notes: - CVE Program Container: References: - https://wolfssl.com/wolfSSL/Blog/Entries/2016/9/26_wolfSSL_3.9.10_Vulnerability_Fixes.html - http://www.securityfocus.com/bid/95050
CVE ID: CVE-2016-7440 State: PUBLISHED Published: 2016-12-13T16:00:00 Last Updated: 2024-08-06T01:57:47.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences. Additional Analyst Notes: - CVE Program Container: References: - https://wolfssl.com/wolfSSL/Blog/Entries/2016/9/26_wolfSSL_3.9.10_Vulnerability_Fixes.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.debian.org/security/2016/dsa-3706 - http://www.securityfocus.com/bid/93659 - http
y/cpuoct2016-2881722.html - http://www.debian.org/security/2016/dsa-3706 - http://www.securityfocus.com/bid/93659 - http://www.securitytracker.com/id/1037050 - https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
CVE ID: CVE-2016-7442 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T01:57:47.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the proxy user settings in "system settings / scan settings / anti spam" configuration tab. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036931 - http://www.securityfocus.com/bid/93266 - http://www.securityfocus.com/archive/1/539518/100/0/threaded
CVE ID: CVE-2016-7443 State: PUBLISHED Published: 2018-03-06T22:00:00 Last Updated: 2024-08-06T01:57:47.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0 - http://www.exponentcms.org/news/patch-1-released-for-v2-3-9
CVE ID: CVE-2016-7444 State: PUBLISHED Published: 2016-09-27T15:00:00 Last Updated: 2024-08-06T01:57:47.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92893 - https://gitlab.com/gnutls/gnutls/commit/964632f37dfdfb914ebc5e49db4fa29af35b1de9 - https://access.redhat.com/errata
93 - https://gitlab.com/gnutls/gnutls/commit/964632f37dfdfb914ebc5e49db4fa29af35b1de9 - https://access.redhat.com/errata/RHSA-2017:2292 - http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html - https://lists.gnupg.org/pipermail/gnutls-devel/2016-September/008146.html - https://www.gnutls.org/security.html
CVE ID: CVE-2016-7445 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T01:57:47.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-26 - http://www.securityfocus.com/bid/93040 - http://www.openwall.com/lists/oss-security/2016/09/18/4 - https://github.com/uclouvain/openjpeg/issues/843 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00109.html - https://github.com/uclouvain/o
/openjpeg/issues/843 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00109.html - https://github.com/uclouvain/openjpeg/blob/openjpeg-2.1/CHANGELOG.md - http://www.openwall.com/lists/oss-security/2016/09/18/6
CVE ID: CVE-2016-7446 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-06T01:57:47.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1374233 - http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.securityfocus.com/bid/93074 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://list
ttp://www.securityfocus.com/bid/93074 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html - http://www.openwall.com/lists/oss-security/2016/09/18/8
CVE ID: CVE-2016-7447 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-06T01:57:47.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1374233 - http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.securityfocus.com/bid/93074 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html - http
.org/debian-lts-announce/2018/06/msg00009.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html - http://www.openwall.com/lists/oss-security/2016/09/18/8
CVE ID: CVE-2016-7448 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-06T01:57:47.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of service (CPU consumption or large memory allocations) via vectors involving the header information and the file size. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1374233 - http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.securityfocus.com/bid/93074 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://lists.opensuse
securityfocus.com/bid/93074 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html - http://www.openwall.com/lists/oss-security/2016/09/18/8
CVE ID: CVE-2016-7449 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-06T01:57:47.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an "unterminated" string. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1374233 - http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.securityfocus.com/bid/93074 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://lists.opensuse.org/opensuse-update
d/93074 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html - http://www.openwall.com/lists/oss-security/2016/09/18/8
CVE ID: CVE-2016-7450 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T01:57:47.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/08/1 - https://security.gentoo.org/glsa/201701-71 - http://www.securityfocus.com/bid/94841
CVE ID: CVE-2016-7452 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T01:57:47.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0 - http://www.securityfocus.com/bid/93045 - https://github.com/exponentcms/exponent-cms/commit/c1092f167cc6c78dc8bf9bf149946c5219413df3
CVE ID: CVE-2016-7453 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T01:57:47.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93045 - https://github.com/exponentcms/exponent-cms/commit/c1092f167cc6c78dc8bf9bf149946c5219413df3
CVE ID: CVE-2016-7454 State: PUBLISHED Published: 2016-12-17T03:34:00 Last Updated: 2024-08-06T01:57:47.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remote management interface, or reset the router. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94881 - https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.html
CVE ID: CVE-2016-7456 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:57:47.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037502 - http://www.securityfocus.com/bid/94990 - http://www.vmware.com/security/advisories/VMSA-2016-0024.html
CVE ID: CVE-2016-7457 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:57:47.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0016.html - http://www.securitytracker.com/id/1036999 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us - http://www.securityfocus.com/bid/93499
CVE ID: CVE-2016-7458 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:57:47.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instances to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0022.html - http://www.securityfocus.com/bid/94483 - http://www.securitytracker.com/id/1037328
CVE ID: CVE-2016-7459 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:57:47.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94486 - http://www.securitytracker.com/id/1037329 - http://www.vmware.com/security/advisories/VMSA-20