Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1463 State: PUBLISHED Published: 2016-07-28T01:00:00 Last Updated: 2024-08-05T22:55:14.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036471 - http://www.securityfocus.com/bid/92152 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-firesight
CVE ID: CVE-2016-1464 State: PUBLISHED Published: 2016-09-03T20:00:00 Last Updated: 2024-08-05T22:55:14.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-meetings-player - http://www.securitytracker.com/id/1036712 - http://www.securityfocus.com/bid/92708 - https://www.exploit-db.com/exploits/40508/
CVE ID: CVE-2016-1465 State: PUBLISHED Published: 2016-07-28T01:00:00 Last Updated: 2024-08-05T22:55:14.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi hypervisor crash and purple screen) via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-avs - http://www.securityfocus.com/bid/92154 - http://www.securitytracker.com/id/1036469
CVE ID: CVE-2016-1466 State: PUBLISHED Published: 2016-08-08T00:00:00 Last Updated: 2024-08-05T22:55:14.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of service (sipd process restart) via crafted headers in a SIP packet, aka Bug ID CSCva39072. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036526 - http://www.securityfocus.com/bid/92271 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-ucm
CVE ID: CVE-2016-1467 State: PUBLISHED Published: 2016-07-28T01:00:00 Last Updated: 2024-08-05T22:55:14.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of service (device restart) by sending a traffic flood to upstream devices, aka Bug ID CSCva01813. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92151 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-vsrm
CVE ID: CVE-2016-1468 State: PUBLISHED Published: 2016-08-08T00:00:00 Last Updated: 2024-08-05T22:55:14.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036529 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-vcse - http://www.securityfocus.com/bid/92274
CVE ID: CVE-2016-1469 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-05T22:55:14.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92706 - http://www.securitytracker.com/id/1036717 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-spa
CVE ID: CVE-2016-1470 State: PUBLISHED Published: 2016-09-02T00:00:00 Last Updated: 2024-08-05T22:55:14.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps - http://www.securitytracker.com/id/1036722 - http://www.securityfocus.com/bid/92709 - http://www.synacktiv.com/ressources/adviso
www.securitytracker.com/id/1036722 - http://www.securityfocus.com/bid/92709 - http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_csrf.pdf
CVE ID: CVE-2016-1471 State: PUBLISHED Published: 2016-09-02T00:00:00 Last Updated: 2024-08-05T22:55:14.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036723 - http://www.securityfocus.com/bid/92713 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps1 - http://www.synacktiv.com/ressources/adv
cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps1 - http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_xss.pdf
CVE ID: CVE-2016-1472 State: PUBLISHED Published: 2016-09-02T00:00:00 Last Updated: 2024-08-05T22:55:14.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036724 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps2 - http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_dos.pdf - http://www.securityfocus.com/b
160831-sps2 - http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_dos.pdf - http://www.securityfocus.com/bid/92707
CVE ID: CVE-2016-1473 State: PUBLISHED Published: 2016-09-02T00:00:00 Last Updated: 2024-08-05T22:55:14.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps3 - http://www.securitytracker.com/id/1036711 - http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_default_snmp.pdf - http://www.securityfoc
id/1036711 - http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_default_snmp.pdf - http://www.securityfocus.com/bid/92710
CVE ID: CVE-2016-1474 State: PUBLISHED Published: 2016-08-08T00:00:00 Last Updated: 2024-08-05T22:55:14.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuw65846, a different vulnerability than CVE-2015-6434. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036530 - http://www.securityfocus.com/bid/92278 - http://tools.cisco.com/security/center/content/Ci
uritytracker.com/id/1036530 - http://www.securityfocus.com/bid/92278 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-cpi
CVE ID: CVE-2016-1476 State: PUBLISHED Published: 2016-08-22T10:00:00 Last Updated: 2024-08-05T22:55:14.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-ip-phone-8800 - http://www.securityfocus.com/bid/92404 - http://www.securitytracker.com/id/1036595
CVE ID: CVE-2016-1477 State: PUBLISHED Published: 2016-08-23T01:00:00 Last Updated: 2024-08-05T22:55:14.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92398 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-csa
CVE ID: CVE-2016-1478 State: PUBLISHED Published: 2016-08-08T00:00:00 Last Updated: 2024-08-05T22:55:14.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service (interface wedge) by sending many crafted NTP packets, aka Bug ID CSCva35619. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92317 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160804-wedge - http://www.securitytracker.com/id/1036541
CVE ID: CVE-2016-1479 State: PUBLISHED Published: 2016-08-22T10:00:00 Last Updated: 2024-08-05T22:55:14.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request, aka Bug ID CSCuz03038. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036646 - http://www.securityfocus.com/bid/92515 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-ipp
CVE ID: CVE-2016-1480 State: PUBLISHED Published: 2016-10-28T10:00:00 Last Updated: 2024-08-05T22:55:14.680Z Vendors: n/a Products: Cisco AsyncOS through WSA10.0.0-000 Problem Types: unspecified Description: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco ESA and Cisco WSA, both virtual and hardware appliances, if the software is configured with message or content filte
sco ESA and Cisco WSA, both virtual and hardware appliances, if the software is configured with message or content filters to scan incoming email attachments. More Information: CSCuw03606, CSCux59734. Known Affected Releases: 8.0.0-000 8.5.6-106 9.0.0-000 9.1.0-032 9.6.0-042 9.5.0-444 WSA10.0.0-000. Known Fixed Releases: 9.1.1-038 9.7.1-066. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037117 - http://www.securitytracker.com/id/1037116 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esawsa1 - http://www.securityfocus.com/bid/93914
CVE ID: CVE-2016-1481 State: PUBLISHED Published: 2016-10-28T10:00:00 Last Updated: 2024-08-05T22:55:14.488Z Vendors: n/a Products: Cisco AsyncOS through 9.7.0-125 Problem Types: unspecified Description: A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter that contains c
ppliances, both virtual and hardware appliances, if the software is configured to apply a message filter that contains certain rules. More Information: CSCux59873. Known Affected Releases: 8.5.6-106 9.1.0-032 9.7.0-125. Known Fixed Releases: 9.1.1-038 9.7.1-066. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa1 - http://www.securitytracker.com/id/1037123 - http://www.securityfocus.com/bid/93908
CVE ID: CVE-2016-1482 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-05T22:55:14.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036809 - http://www.securityfocus.com/bid/92959 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wem
CVE ID: CVE-2016-1483 State: PUBLISHED Published: 2016-09-19T01:00:00 Last Updated: 2024-08-05T22:55:14.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-validation component of an unspecified service, aka Bug ID CSCuy92704. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wms - http://www.securityfocus.com/bid/92957 - http://www.securitytracker.com/id/1036808
CVE ID: CVE-2016-1484 State: PUBLISHED Published: 2016-08-23T01:00:00 Last Updated: 2024-08-05T22:55:14.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-wms1 - http://www.securityfocus.com/bid/92519 - http://www.securitytracker.com/id/1036649
CVE ID: CVE-2016-1485 State: PUBLISHED Published: 2016-08-22T10:00:00 Last Updated: 2024-08-05T22:55:14.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92518 - http://www.securitytracker.com/id/1036647 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-ise
CVE ID: CVE-2016-1486 State: PUBLISHED Published: 2016-10-28T10:00:00 Last Updated: 2024-08-05T22:55:14.575Z Vendors: n/a Products: Cisco AsyncOS through 9.7.1-066 Problem Types: unspecified Description: A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This vulnerability affects Cisco AsyncOS Software releases 9.7.1 and later, prior to the first fixed release, for both virtual and hardw
ty affects Cisco AsyncOS Software releases 9.7.1 and later, prior to the first fixed release, for both virtual and hardware Cisco Email Security Appliances, if the AMP feature is configured to scan incoming email attachments. More Information: CSCuy99453. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 10.0.0-125 9.7.1-207 9.7.2-047. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa2 - http://www.securitytracker.com/id/1037124 - http://www.securityfocus.com/bid/93906
CVE ID: CVE-2016-1487 State: PUBLISHED Published: 2020-03-09T18:06:23 Last Updated: 2024-08-05T22:55:14.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE747&locale=EN&userlocale=EN_US
CVE ID: CVE-2016-1488 State: PUBLISHED Published: 2016-01-30T11:00:00 Last Updated: 2024-08-05T22:55:14.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-019-01 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-743465.pdf
CVE ID: CVE-2016-1489 State: PUBLISHED Published: 2016-01-26T19:00:00 Last Updated: 2024-08-05T22:55:14.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html - https://support.lenovo.com/us/en/product_security/len_4058 - http://www.coresecurity.c
closure-Hardcoded-Password.html - https://support.lenovo.com/us/en/product_security/len_4058 - http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities - http://www.securityfocus.com/archive/1/537365/100/0/threaded - http://seclists.org/fulldisclosure/2016/Jan/67
CVE ID: CVE-2016-1490 State: PUBLISHED Published: 2016-01-26T19:00:00 Last Updated: 2024-08-05T22:55:14.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html - https://support.lenovo.com/us/en/product_security/len_4058 - http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities - http://www.securityfocus.com/archive/1/537365/100/0/threaded - ht
m/advisories/lenovo-shareit-multiple-vulnerabilities - http://www.securityfocus.com/archive/1/537365/100/0/threaded - http://seclists.org/fulldisclosure/2016/Jan/67
CVE ID: CVE-2016-1491 State: PUBLISHED Published: 2016-01-26T19:00:00 Last Updated: 2024-08-05T22:55:14.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html - https://support.lenovo.com/us/en/product_security/len_4058 - http://www.coresecurity.com/advisories/lenovo-sha
rd.html - https://support.lenovo.com/us/en/product_security/len_4058 - http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities - http://www.securityfocus.com/archive/1/537365/100/0/threaded - http://seclists.org/fulldisclosure/2016/Jan/67
CVE ID: CVE-2016-1492 State: PUBLISHED Published: 2016-01-26T19:00:00 Last Updated: 2024-08-05T22:55:14.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135378/Lenovo-ShareIT-Information-Disclosure-Hardcoded-Password.html - https://support.lenovo.com/us/en/product_security/len_4058 - http://www.coresecurity.com/advisories/lenovo-shareit-
ml - https://support.lenovo.com/us/en/product_security/len_4058 - http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities - http://www.securityfocus.com/archive/1/537365/100/0/threaded - http://seclists.org/fulldisclosure/2016/Jan/67
CVE ID: CVE-2016-1493 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-05T22:55:14.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135314/Intel-Driver-Update-Utility-2.2.0.5-Man-In-The-Middle.html - http://www.coresecurity.com/advisories/intel-driver-update-utility-mitm - https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00048&languageid=en-fr - http://www.securityf
ty-mitm - https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00048&languageid=en-fr - http://www.securityfocus.com/archive/1/537327/100/0/threaded - http://seclists.org/fulldisclosure/2016/Jan/56
CVE ID: CVE-2016-1494 State: PUBLISHED Published: 2016-01-13T15:00:00 Last Updated: 2024-08-05T22:55:14.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/05/3 - http://www.securityfocus.com/bid/79829 - https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/ - http://www.openwall.com/lists/oss-security/2016/01/05/1 - http://lists.fedoraproject.org/pipermail
gery-in-python-rsa/ - http://www.openwall.com/lists/oss-security/2016/01/05/1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175897.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00032.html - https://bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175942.html