Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2843 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:32:21.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035185 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-2844 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:32:21.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when anonymous block wrappers may exist, which allows remote attackers to cause a denial of service (incorrect cast and assertion failure) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=546849 - http://www.securitytracker.com/id/1035185 - http://www.securityfocus
s.chromium.org/p/chromium/issues/detail?id=546849 - http://www.securitytracker.com/id/1035185 - http://www.securityfocus.com/bid/84170 - https://code.google.com/p/chromium/issues/detail?id=591402 - https://codereview.chromium.org/1423573002 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-2845 State: PUBLISHED Published: 2016-03-06T02:00:00 Last Updated: 2024-08-05T23:32:21.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1454003003/ - http://www.securitytracker.com/id/1035185 - https://code.goog
eferences: - https://codereview.chromium.org/1454003003/ - http://www.securitytracker.com/id/1035185 - https://code.google.com/p/chromium/issues/detail?id=591402 - https://bugs.chromium.org/p/chromium/issues/detail?id=542060 - http://homakov.blogspot.com/2014/01/using-content-security-policy-for-evil.html - http://www.securityfocus.com/bid/84168 - http://www.ubuntu.com/usn/USN-2920-1 - http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
CVE ID: CVE-2016-2846 State: PUBLISHED Published: 2016-03-16T10:00:00 Last Updated: 2024-08-05T23:32:21.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-833048.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-16-075-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-833048.pdf
CVE ID: CVE-2016-2847 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:32:21.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - https://bugzilla.redhat.com/show_bug.cgi?id=1313428 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=759c01142a5d0f364a462346168a56de28a80f52 - http:
tp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=759c01142a5d0f364a462346168a56de28a80f52 - http://www.ubuntu.com/usn/USN-2967-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-2949-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/83870 - http://www.debian.org/security/2016/dsa-3503 - http://www.ubuntu.com/usn/USN-2947-3 - http://www.ubuntu.com/usn/USN-2967-2 - http://www.openwall.com/lists/oss-security/2016/03/01/3 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.
http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.com/usn/USN-2947-2 - http://www.ubuntu.com/usn/USN-2947-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - https://github.com/torvalds/linux/commit/759c01142a5d0f364a462346168a56de28a80f52 - http://www.ubuntu.com/usn/USN-2946-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http:
nounce/2016-08/msg00038.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://rhn.redhat.com/errata/RHSA-2017-0217.html - http://www.ubuntu.com/usn/USN-2948-1 - http://www.ubuntu.com/usn/USN-2946-1 - http://www.ubuntu.com/usn/USN-2948-2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-2848 State: PUBLISHED Published: 2016-10-21T10:00:00 Last Updated: 2024-08-05T23:32:21.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2093.html - http://www.securitytracker.com/id/1037073 - https://security.netapp.com/advisory/ntap-20180926-0005/ - https://security.netapp.com/advisory/ntap-20180926-0002/ - https://kb.isc.org/article/AA-01433/74/CVE-2016-2848
-0005/ - https://security.netapp.com/advisory/ntap-20180926-0002/ - https://kb.isc.org/article/AA-01433/74/CVE-2016-2848 - http://rhn.redhat.com/errata/RHSA-2016-2094.html - http://rhn.redhat.com/errata/RHSA-2016-2099.html - http://www.securityfocus.com/bid/93809 - https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git%3Ba=commit%3Bh=4adf97c32fcca7d00e5756607fd045f2aab9c3d4 - http://www.securityfocus.com/bid/93814 - https://bugzilla.redhat.com/show_bug.cgi?id=1385450
CVE ID: CVE-2016-2849 State: PUBLISHED Published: 2016-05-13T14:00:00 Last Updated: 2024-08-05T23:32:21.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183669.html - http://www.debian.org/security/2016/dsa-3565 - http://marc.info/?l=botan-devel&m=146185420505943&w=2 - https://security.gentoo.org/glsa/201701-23 - ht
/2016/dsa-3565 - http://marc.info/?l=botan-devel&m=146185420505943&w=2 - https://security.gentoo.org/glsa/201701-23 - http://botan.randombit.net/security.html
CVE ID: CVE-2016-2850 State: PUBLISHED Published: 2016-05-13T14:00:00 Last Updated: 2024-08-05T23:32:21.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=botan-devel&m=145852488622892&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183669.html - https://security.gentoo.org/glsa/201701-23 - http://botan.randombit.net/security.html
CVE ID: CVE-2016-2851 State: PUBLISHED Published: 2016-04-07T23:00:00 Last Updated: 2024-08-05T23:32:21.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2926-1 - http://www.securityfocus.com/archive/1/537745/100/0/threaded - http://www.debian.org/security/2016/dsa-3512 - https://security.gentoo.org/glsa/201701-10 -
e/1/537745/100/0/threaded - http://www.debian.org/security/2016/dsa-3512 - https://security.gentoo.org/glsa/201701-10 - https://www.exploit-db.com/exploits/39550/ - http://www.securityfocus.com/bid/84285 - http://seclists.org/fulldisclosure/2016/Mar/21 - https://www.x41-dsec.de/lab/advisories/x41-2016-001-libotr/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00021.html - https://lists.cypherpunks.ca/pipermail/otr-users/2016-March/002581.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00030.html
CVE ID: CVE-2016-2853 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:32:21.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96839 - http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/ - http://www.openwall.com/lists/oss-security/2016/02/24/9 - https://sourceforge.net/p/aufs/mailman/mes
InUserNamespaces/ - http://www.openwall.com/lists/oss-security/2016/02/24/9 - https://sourceforge.net/p/aufs/mailman/message/34864744/ - http://www.openwall.com/lists/oss-security/2021/10/18/1
CVE ID: CVE-2016-2854 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:32:21.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/ - http://www.openwall.com/lists/oss-security/2016/02/24/9 - https://sourceforge.net/p/aufs/mailman/message/34864744/ - http://www.securityfocus.com/bid/96838
CVE ID: CVE-2016-2855 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-05T23:40:13.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/34 - https://bogner.sh/2016/05/cve-2016-2855-huawei-mobile-broadband-hl-service-local-privilege-escalation/ - http://packetstormsecurity.com/files/137025/Huawei-Mobile-Broadband-HL-Service-22.001.25.00.03-Local-Privile
calation/ - http://packetstormsecurity.com/files/137025/Huawei-Mobile-Broadband-HL-Service-22.001.25.00.03-Local-Privilege-Escalation.html - https://www.youtube.com/watch?v=MwtjE2PmEJU
CVE ID: CVE-2016-2856 State: PUBLISHED Published: 2016-03-14T01:00:00 Last Updated: 2024-08-05T23:40:13.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: pt_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS and before 2.19-0ubuntu6.8 on Ubuntu 14.04 LTS; and the glibc package before 2.21-0ubuntu4.2 on Ubuntu 15.10 and before 2.23-0ubuntu1 on Ubuntu 16.04 LTS and 16.10 lacks a namespace check associated with file-descriptor passing, which allows local users to capture keystrokes and spoof data, and possibly gain privileges, via pts read and write operations, related to debian/sysdeps/linux.mk. NOTE:
spoof data, and possibly gain privileges, via pts read and write operations, related to debian/sysdeps/linux.mk. NOTE: this is not considered a vulnerability in the upstream GNU C Library because the upstream documentation has a clear security recommendation against the --enable-pt_chown option. Additional Analyst Notes: - CVE Program Container: References: - http://www.halfdog.net/Security/2015/PtChownArbitraryPtsAccessViaUserNamespace/ - http://anonscm.debian.org/cgit/pkg-glibc/glibc.git/commit/?h=jessie&id=11475c083282c1582c4dd72eecfcb2b7d308c958 - http://www.openwall.com/lists/oss-security/2016/03/07/2 - http://www.securityfocus.com/bid/84601 - http://www.ubuntu.com/usn/USN-2985-2 - htt
om/lists/oss-security/2016/03/07/2 - http://www.securityfocus.com/bid/84601 - http://www.ubuntu.com/usn/USN-2985-2 - http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-2856.html - http://anonscm.debian.org/cgit/pkg-glibc/glibc.git/commit/?h=jessie&id=09f7764882a81e13e7b5d87d715412283a6ce403 - http://www.openwall.com/lists/oss-security/2016/02/23/3 - http://www.ubuntu.com/usn/USN-2985-1
CVE ID: CVE-2016-2857 State: PUBLISHED Published: 2016-04-08T16:00:00 Last Updated: 2024-08-05T23:40:13.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0334.html - http://rhn.redhat.com/errata/RHSA-2016-2671.html - http://rhn.redhat.com/errata/RHSA-2017-0083.html - http://www.openwall.com/lists/oss-security/2016/03/03/9 - http://rhn.redhat.com/errata/RHSA-2016-2706.html - http:/
ml - http://www.openwall.com/lists/oss-security/2016/03/03/9 - http://rhn.redhat.com/errata/RHSA-2016-2706.html - http://www.openwall.com/lists/oss-security/2016/03/07/3 - http://www.securityfocus.com/bid/84130 - http://rhn.redhat.com/errata/RHSA-2017-0350.html - http://rhn.redhat.com/errata/RHSA-2016-2705.html - http://www.ubuntu.com/usn/USN-2974-1 - http://rhn.redhat.com/errata/RHSA-2017-0309.html - http://rhn.redhat.com/errata/RHSA-2016-2670.html - http://rhn.redhat.com/errata/RHSA-2017-0344.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=362786f14a753d8a5256ef97d7c10ed576d6572b - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://rhn.redhat.com/errata/R
97d7c10ed576d6572b - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://rhn.redhat.com/errata/RHSA-2016-2704.html
CVE ID: CVE-2016-2858 State: PUBLISHED Published: 2016-04-07T19:00:00 Last Updated: 2024-08-05T23:40:13.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/07/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1314676 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=60253ed1e6ec6d8e5ef2efe7bf755f475dce9956 - https://securit
i?id=1314676 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=60253ed1e6ec6d8e5ef2efe7bf755f475dce9956 - https://security.gentoo.org/glsa/201604-01 - http://www.securityfocus.com/bid/84134 - http://www.ubuntu.com/usn/USN-2974-1 - http://www.openwall.com/lists/oss-security/2016/03/04/1 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-2859 State: REJECTED Published: 2016-03-10T00:00:00 Last Updated: 2016-03-09T23:57:01 Description: No description available.
CVE ID: CVE-2016-2860 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-05T23:40:13.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and create arbitrary groups as administrators by leveraging mishandling of the creator ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.openafs.org/pages/security/OPENAFS-SA-2016-001.txt - http://www.debian.org/security/2016/dsa-3569 - https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17 - http://git.openafs.org/?p=openafs.
/security/2016/dsa-3569 - https://www.openafs.org/dl/openafs/1.6.17/RELNOTES-1.6.17 - http://git.openafs.org/?p=openafs.git%3Ba=commitdiff%3Bh=396240cf070a806b91fea81131d034e1399af1e0 - https://lists.openafs.org/pipermail/openafs-announce/2016/000496.html
CVE ID: CVE-2016-2861 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:13.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 does not properly encrypt data, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PI60897 - http://www-01.ibm.com/support/docview.wss?uid=swg21983036 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI60898
CVE ID: CVE-2016-2862 State: PUBLISHED Published: 2016-07-03T21:00:00 Last Updated: 2024-08-05T23:40:13.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 before 8.0.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR55049 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR55139 - http://www.securitytracker.com/id/1036206 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR55264 - http://www.
39 - http://www.securitytracker.com/id/1036206 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR55264 - http://www.securityfocus.com/bid/91533 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR55141 - http://www-01.ibm.com/support/docview.wss?uid=swg21983625
CVE ID: CVE-2016-2863 State: PUBLISHED Published: 2016-07-03T21:00:00 Last Updated: 2024-08-05T23:40:13.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91544 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR55776 - http://www.securitytracker.com/id/1036219 - http://www-01.ibm.com/support/docview.wss?uid=swg21983
wss?uid=swg1JR55776 - http://www.securitytracker.com/id/1036219 - http://www-01.ibm.com/support/docview.wss?uid=swg21983626
CVE ID: CVE-2016-2864 State: PUBLISHED Published: 2016-11-24T19:41:00 Last Updated: 2024-08-05T23:40:13.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 befo
Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991478 - http://www.securityfocus.com/bid/94542
CVE ID: CVE-2016-2865 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-05T23:40:14.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91680 - http://www-01.ibm.com/support/docview.wss?uid=swg21985865
CVE ID: CVE-2016-2866 State: PUBLISHED Published: 2017-02-08T19:00:00 Last Updated: 2024-08-05T23:40:13.662Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997104
CVE ID: CVE-2016-2867 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:13.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983444
CVE ID: CVE-2016-2868 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:14.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21985774
CVE ID: CVE-2016-2869 State: PUBLISHED Published: 2016-11-30T18:00:00 Last Updated: 2024-08-05T23:40:13.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94859 - http://www-01.ibm.com/support/docview.wss?uid=swg21987768
CVE ID: CVE-2016-2870 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-05T23:40:13.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983035 - http://www.securityfocus.com/bid/91551 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT14815