Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rity.com/files/136758/Symantec-Brightmail-10.6.0-7-LDAP-Credential-Grabber.html - http://www.securityfocus.com/bid/86137 - http://www.securitytracker.com/id/1035609 - https://www.exploit-db.com/exploits/39715/
CVE ID: CVE-2016-2204 State: PUBLISHED Published: 2016-04-22T18:00:00 Last Updated: 2024-08-05T23:24:48.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/86138 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160418_00 - http://www.securitytracker.com/id/1035609
CVE ID: CVE-2016-2205 State: PUBLISHED Published: 2016-07-12T01:00:00 Last Updated: 2024-08-05T23:24:48.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read unspecified application files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&p
am Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00 - http://www.securityfocus.com/bid/89395 - http://www.securitytracker.com/id/1036263 - http://www.securitytracker.com/id/1036262
CVE ID: CVE-2016-2206 State: PUBLISHED Published: 2016-07-12T01:00:00 Last Updated: 2024-08-05T23:24:48.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00 - http://www.sec
response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00 - http://www.securitytracker.com/id/1036263 - http://www.securitytracker.com/id/1036262 - http://www.securityfocus.com/bid/89394
CVE ID: CVE-2016-2207 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-05T23:24:48.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0
5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4 HF01; Symantec Message Gateway (SMG) before 10.6.1-4; Symantec Message Gateway for Service Providers (SMG-SP) 10.5 before patch 254 and 10.6 before patch 253; Norton AntiVirus, Norton Security, Norton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE)
rton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation) via a crafted RAR file that is mishandled during decompression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91434 - http://www.securitytracker.com/id/1036199 - http://www.securitytracker.com/id/1036198 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00 - https://ww
ity_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00 - https://www.exploit-db.com/exploits/40031/
CVE ID: CVE-2016-2208 State: PUBLISHED Published: 2016-05-19T10:00:00 Last Updated: 2024-08-05T23:24:48.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation and system crash) via a malformed PE header file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90653 - https://www.exploit-db.com/exploits/39835/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=820 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securi
rg/p/project-zero/issues/detail?id=820 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20160516_00 - http://www.securitytracker.com/id/1035903
CVE ID: CVE-2016-2209 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-05T23:24:48.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPS
HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4 HF01; Symantec Message Gateway (SMG) before 10.6.1-4; Symantec Message Gateway for Service Providers (SMG-SP) 10.5 before patch 254 and 10.6 before patch 253; Norton AntiVirus, Norton Security, Norton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before
on AntiVirus, Norton Security, Norton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40037/ - http://www.securitytracker.com/id/1036199 - http://www.securitytracker.com/id/1036198 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00 - http://www.securityfocus.com/bid/91436
CVE ID: CVE-2016-2210 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-05T23:24:48.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SP
ton AntiVirus, Norton Security, Norton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036199 - http://www.securitytracker.com/id/1036198 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00 - https://www.exploit-db.com/exploits/40032/ - http://www.securityfocus.com/bid/91437
CVE ID: CVE-2016-2211 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-05T23:24:48.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0
rton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted CAB file that is mishandled during decompression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036199 - http://www.securitytracker.com/id/1036198 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00 - http://www.securityfocus.com/bid/91438
CVE ID: CVE-2016-2212 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T23:24:48.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getOrderByStatusUrlKey function in the Mage_Rss_Helper_Order class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition before 1.14.2.3 and Magento Community Edition before 1.9.2.3 allows remote attackers to obtain sensitive order information via the order_id in a JSON object in the data parameter in an RSS feed request to index.php/rss/order/status. Additional Analyst Notes: - CVE Program Container: References: - http://karmainsecurity.com/KIS-2016-02 - http://www.securityfocus.com/archive/1/537601/100
gram Container: References: - http://karmainsecurity.com/KIS-2016-02 - http://www.securityfocus.com/archive/1/537601/100/0/threaded - http://packetstormsecurity.com/files/135941/Magento-1.9.2.2-RSS-Feed-Information-Disclosure.html - https://magento.com/security/patches/supee-7405 - http://seclists.org/fulldisclosure/2016/Feb/105
CVE ID: CVE-2016-2213 State: PUBLISHED Published: 2016-02-03T11:00:00 Last Updated: 2024-08-05T23:24:48.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG 2000 data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=0aada30510d809bccfd539a90ea37b61188f2cb4 - http://www.securitytracker.com/id/1034923 - https://security.gentoo.org/glsa/201606-09
CVE ID: CVE-2016-2214 State: PUBLISHED Published: 2016-02-08T19:00:00 Last Updated: 2024-08-05T23:24:48.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus with software before V100R001C00SPC319 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-agilecontroller-en
CVE ID: CVE-2016-2216 State: PUBLISHED Published: 2016-04-07T21:00:00 Last Updated: 2024-08-05T23:24:48.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a. Additional Analyst Notes: - CVE Program Container: References: - http://blog.safebreach.com/2016/02/09/http-response-splitting-in-node-js-root-cause-analysis/ - http://packetstormsecurity.com/files/135711/Node.j
/2016/02/09/http-response-splitting-in-node-js-root-cause-analysis/ - http://packetstormsecurity.com/files/135711/Node.js-HTTP-Response-Splitting.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177673.html - https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/ - http://www.securityfocus.com/bid/83141 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177184.html - https://security.gentoo.org/glsa/201612-43 - http://info.safebreach.com/hubfs/Node-js-Response-Splitting.pdf
CVE ID: CVE-2016-2217 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-05T23:24:48.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-23 - http://www.dest-unreach.org/socat/contrib/socat-secadv7.html - http://www.openwall.com/lists/oss-security/2016/02/04/1 - http://www.openwall.com/lists/oss-security/2016/02/01/4
CVE ID: CVE-2016-2219 State: PUBLISHED Published: 2016-07-12T19:00:00 Last Updated: 2024-08-05T23:24:48.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036192 - https://security.paloaltonetworks.com/CVE-2016-2219
CVE ID: CVE-2016-2221 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-05T23:24:48.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL that triggers incorrect hostname parsing, as demonstrated by an https:example.com URL. Additional Analyst Notes: - CVE Program Container: References: - https://codex.wordpress.org/Version_4.4.2 - http://www.securitytracker.com/id/1034933 - http://www.securityfocus.com/bid/82463 - https://core.trac
g/Version_4.4.2 - http://www.securitytracker.com/id/1034933 - http://www.securityfocus.com/bid/82463 - https://core.trac.wordpress.org/changeset/36444 - https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/ - http://www.debian.org/security/2016/dsa-3472 - https://wpvulndb.com/vulnerabilities/8377
CVE ID: CVE-2016-2222 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-05T23:24:49.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery (SSRF) attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php. Additional Analyst Notes: - CVE Program Container: References: - https://codex.wordpress.org/Version_4.4.2 - http://www.securitytracker.com/id/1034933 - https://wpvulndb.com/vulnerabilities/8376 - https://core.trac.wordpress.org/changeset/36435 - http://www.securityfo
33 - https://wpvulndb.com/vulnerabilities/8376 - https://core.trac.wordpress.org/changeset/36435 - http://www.securityfocus.com/bid/82454 - https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/ - http://www.debian.org/security/2016/dsa-3472 - https://hackerone.com/reports/110801 - https://news.ycombinator.com/item?id=20433070
CVE ID: CVE-2016-2224 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T23:24:48.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via vectors involving compressed items in a reply. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82903 - http://www.openwall.com/lists/oss-security/2016/02/05/2 - https://security-tracker.debian.org/tracker/CVE-2016-2224 - http://repo.or.cz/uclibc-ng.git/commit/d9c3a16dcab57d6b56225b9a67e9119cc9e2e4ac - http://www.openwall.com/li
2016-2224 - http://repo.or.cz/uclibc-ng.git/commit/d9c3a16dcab57d6b56225b9a67e9119cc9e2e4ac - http://www.openwall.com/lists/oss-security/2016/02/05/3
CVE ID: CVE-2016-2225 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T23:24:48.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82903 - http://www.openwall.com/lists/oss-security/2016/02/05/2 - http://repo.or.cz/uclibc-ng.git/commit/6932f2282ba0578d6ca2f21eead920d6b78bc93c - https://security-tracker.debian.org/tracker/CVE-2016-2225 - http://www.openwall.com/lists/oss-security/2016/02/0
bc93c - https://security-tracker.debian.org/tracker/CVE-2016-2225 - http://www.openwall.com/lists/oss-security/2016/02/05/3
CVE ID: CVE-2016-2226 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-05T23:24:48.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42386/ - http://www.securityfocus.com/bid/90103 - http://www.openwall.com/lists/oss-security/2016/05/05/5 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687
CVE ID: CVE-2016-2228 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:24:48.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, as demonstrated by a request to xplorer/gollem/manager.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/06/4 - http://bugs.horde.org/ticket/14213 - http://www.openwall.com/lists/oss-security/2016/02
ists/oss-security/2016/02/06/4 - http://bugs.horde.org/ticket/14213 - http://www.openwall.com/lists/oss-security/2016/02/06/5 - http://www.debian.org/security/2016/dsa-3497 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177484.html - http://lists.horde.org/archives/announce/2016/001149.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177584.html - http://lists.horde.org/archives/announce/2016/001148.html - https://github.com/horde/horde/blob/e838d4c800b0d1ecaf8b4cc613fd3af4f994c79c/bundles/webmail/docs/CHANGES - https://github.com/horde/horde/commit/ab07a1b447de34e13983b4d7ceb18b58c3a358d8
CVE ID: CVE-2016-2230 State: PUBLISHED Published: 2016-02-08T16:00:00 Last Updated: 2024-08-05T23:24:48.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RasPlex/RasPlex/issues/453 - http://www.kb.cert.org/vuls/id/544527
CVE ID: CVE-2016-2231 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-05T23:24:48.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows-based Host Interface Program (WHIP) service on Huawei SmartAX MT882 devices V200R002B022 Arg relies on the client to send a length field that is consistent with a buffer size, which allows remote attackers to cause a denial of service (device outage) or possibly have unspecified other impact via crafted traffic on TCP port 8701. Additional Analyst Notes: - CVE Program Container: References: - https://debihiga.wordpress.com/sa-whip/
CVE ID: CVE-2016-2232 State: PUBLISHED Published: 2016-02-22T15:05:00 Last Updated: 2024-08-05T23:24:48.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a zero length error correcting redundancy packet for a UDPTL FAX packet that is lost. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2016-003.html - http://www.securitytracker.com/id/1034931 - h
ferences: - http://downloads.asterisk.org/pub/security/AST-2016-003.html - http://www.securitytracker.com/id/1034931 - http://www.debian.org/security/2016/dsa-3700
CVE ID: CVE-2016-2233 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-05T23:24:48.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39657/ - http://www.securityfocus.com/bid/95920 - http://packetstormsecurity.com/files/136563/Hexchat-IRC-Client-2.11.0-CAP-LS-Handling-Buffer-Overflow.html
CVE ID: CVE-2016-2242 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T23:24:48.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exponentcms.org/news/show/title/security-notice-closing-an-exponent-security-vulnerability - http://www.exponentcms.org/news/patch-3-released-for-v2-3-7 - http://www.securityfocus.com/archive/1/537499/100/0/threaded - http://packetstormsecurity.com/files/135721/Exponent-2.3.7-PHP-Code-Execution.html - https://www.htbridge.c