Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1541 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T23:02:11.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3574 - https://github.com/libarchive/libarchive/commit/d0331e8e5b05b475f20b1f3101fe1ad772d7e7e7 - http://www.ubuntu.com/usn/USN-2981-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - http://lists
1fe1ad772d7e7e7 - http://www.ubuntu.com/usn/USN-2981-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - http://lists.opensuse.org/opensuse-updates/2016-06/msg00003.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://github.com/libarchive/libarchive/issues/656 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00090.html - http://www.securityfocus.com/bid/89355 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.352685 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://security.gentoo.org/glsa/201701-03 - http://www.kb.cert.org/vuls/id/862384
CVE ID: CVE-2016-1542 State: PUBLISHED Published: 2016-06-13T14:00:00 Last Updated: 2024-08-05T23:02:11.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136461/BMC-Server-Automation-BSA-RSCD-Agent-User-Enumeration.html - https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/ - http://www.secu
-Enumeration.html - https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/ - http://www.securityfocus.com/archive/1/537909/100/0/threaded - https://www.exploit-db.com/exploits/43902/ - https://www.exploit-db.com/exploits/43939/ - https://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solution
CVE ID: CVE-2016-1543 State: PUBLISHED Published: 2016-06-13T14:00:00 Last Updated: 2024-08-05T23:02:11.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure. Additional Analyst Notes: - CVE Program Container: References: - https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/ - http://www.securityfocus.com/archive/1/537910/100/0/threaded - https://www.exploit-db.com/exploits/43
d-cve-2016-1543/ - http://www.securityfocus.com/archive/1/537910/100/0/threaded - https://www.exploit-db.com/exploits/43902/ - https://www.exploit-db.com/exploits/43939/ - http://packetstormsecurity.com/files/136462/BMC-Server-Automation-BSA-RSCD-Agent-Unauthorized-Password-Reset.html - https://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solution
CVE ID: CVE-2016-1544 State: PUBLISHED Published: 2020-02-06T14:20:29 Last Updated: 2024-08-05T23:02:11.949Z Vendors: nghttp2 Products: nghttp2 Problem Types: Other Description: nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1308461 - https://github.com/nghttp2/nghttp2/releases/tag/v1.7.1 - https://github.com/nghttp2/nghttp2/compare/v1.7.0...v1.7.1 - https://security.gentoo.org/glsa/201612-13 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177666.html - http://lists.fedoraproject.org/pipermail/package-announce/2
t.org/pipermail/package-announce/2016-February/177666.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177308.html
CVE ID: CVE-2016-1546 State: PUBLISHED Published: 2016-07-06T14:00:00 Last Updated: 2024-08-05T23:02:11.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92331 - http://httpd.apache.org/security/vulnerabilities_24.html - https://security.gentoo.org/glsa/201610-02 - https://access.redhat.com/errata/RHSA-2017:
urity/vulnerabilities_24.html - https://security.gentoo.org/glsa/201610-02 - https://access.redhat.com/errata/RHSA-2017:1161 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.apache.org/dist/httpd/CHANGES_2.4 - http://svn.apache.org/viewvc?view=revision&revision=1733727 - http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html - https://security.netapp.com/advisory/ntap-20180601-0001/ - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3
ttps://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c
aa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.o
ead.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2016-1547 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-05T23:02:11.962Z Vendors: NTP Project, NTPsec Project Products: NTP, NTPSec Problem Types: unspecified Description: An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/88276 - http://www.debian.org/security/2016/dsa-3629 - http://www.oracle.
References: - http://www.securityfocus.com/bid/88276 - http://www.debian.org/security/2016/dsa-3629 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://access.redhat.com/errata/RHSA-2016:1141 - http://rhn.redhat.com/errata/RHSA-2016-1552.html - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - http://www.talosintelligence.com/reports/TALOS-2016-0081/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - https://security.gentoo.org/glsa/201607-15 - https://cert-portal.siemens.com/productcert/pdf/ssa-497
-SA-16:16.ntp.asc - https://security.gentoo.org/glsa/201607-15 - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19
CVE ID: CVE-2016-1548 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-05T23:02:11.744Z Vendors: NTP Project, NTPsec Project Products: NTP, NTPSec Problem Types: unspecified Description: An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched. Additional Analyst Notes: -
after the mode has been changed. ntpq gives no indication that the mode has been switched. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3096-1 - http://www.debian.org/security/2016/dsa-3629 - http://www.talosintelligence.com/reports/TALOS-2016-0082/ - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://access.redhat.com/errata/RHSA-2016:1141 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://www.securityfocus.com/bid/88264 - https://www.kb.cert.org/vuls/id/718152 - http://rhn.redhat.com/errata/RHSA-2016-1552.html - http://www.securitytracker.com/id/1035705 - http://
/vuls/id/718152 - http://rhn.redhat.com/errata/RHSA-2016-1552.html - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html - http://packetstormse
o.org/glsa/201607-15 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html - http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0082 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html - https://www.debian.org/security/2016/dsa-3629 - http://www.securityfocus.com/archive/1/538233/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html - http://www.s
hive/1/538233/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html - http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 - https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19
CVE ID: CVE-2016-1549 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-05T23:02:12.001Z Vendors: NTP Project, NTPsec Project Products: NTP, NTPSec Problem Types: unspecified Description: A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0083/ - http://www.securityfocus.com/bid/88200 - http://www.securitytracker.com/id/103
telligence.com/reports/TALOS-2016-0083/ - http://www.securityfocus.com/bid/88200 - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - https://www.synology.com/support/security/Synology_SA_18_13 - https://security.gentoo.org/glsa/201607-15 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
CVE ID: CVE-2016-1550 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-05T23:02:11.957Z Vendors: NTP Project, NTPsec Project Products: NTP, NTPSec Problem Types: unspecified Description: An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3096-1 - http://www.debian.org/security/2016/dsa-3629 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - h
ian.org/security/2016/dsa-3629 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://access.redhat.com/errata/RHSA-2016:1141 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - https://www.kb.cert.org/vuls/id/718152 - http://rhn.redhat.com/errata/RHSA-2016-1552.html - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - http://www.talosintelligence.com/reports/TALOS-2016-0084/ - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd - https://security.FreeBSD
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - http://www.securityfocus.com/bid/88261 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html - http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2016
se.org/opensuse-security-announce/2016-06/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html - https://www.debian.org/security/2016/dsa-3629 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0084 - http://www.securityfocus.com/archive/1/538233/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html - http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/18364
nsuse-security-announce/2016-05/msg00034.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 - https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19
CVE ID: CVE-2016-1551 State: PUBLISHED Published: 2017-01-27T17:00:00 Last Updated: 2024-08-05T23:02:12.002Z Vendors: NTP Project, NTPsec Project Products: NTP, NTPSec Problem Types: unspecified Description: ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks t
() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/88219 - http://www.talosintelligence.com/reports/TALOS-2016-0132/ - http://www.securitytracker.com/id/1035705 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://security.netapp.com/advisory/ntap-20171004-0002/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - https://security.gentoo.org/glsa/201
20171004-0002/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc - https://security.gentoo.org/glsa/201607-15
CVE ID: CVE-2016-1555 State: PUBLISHED Published: 2017-04-21T15:00:00.000Z Last Updated: 2025-10-21T23:55:42.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic - http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-In
5-Notification?cid=wmt_netgear_organic - http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html - https://www.exploit-db.com/exploits/45909/ - http://seclists.org/fulldisclosure/2016/Feb/112
CVE ID: CVE-2016-1556 State: PUBLISHED Published: 2017-04-21T15:00:00 Last Updated: 2024-08-05T23:02:12.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unauthenticated webpages. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/30481/CVE-2016-1556-Notification?cid=wmt_netgear_organic - http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html - http://seclists.org/fulldisclosure
ty.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html - http://seclists.org/fulldisclosure/2016/Feb/112
CVE ID: CVE-2016-1557 State: PUBLISHED Published: 2017-04-21T15:00:00 Last Updated: 2024-08-05T23:02:11.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html - https://kb.netgear.com/30482/CVE-2016-1557-Notification?cid=wmt_netgear_organic - http://seclists.org/fulldisclosure/2016/Feb/112
CVE ID: CVE-2016-1558 State: PUBLISHED Published: 2017-04-21T15:00:00 Last Updated: 2024-08-05T23:02:11.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_155
tainer: References: - http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559 - http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html - http://seclists.org/fulldisclosure/2016/Feb/112
CVE ID: CVE-2016-1559 State: PUBLISHED Published: 2017-04-21T15:00:00 Last Updated: 2024-08-05T23:02:11.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP. Additional Analyst Notes: - CVE Program Container: References: - http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559 - http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html - http://seclists.org/fulldisclosur
ity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html - http://seclists.org/fulldisclosure/2016/Feb/112
CVE ID: CVE-2016-1560 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T23:02:11.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html - https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hard
word.html - https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials - http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey