Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1985 State: PUBLISHED Published: 2016-01-30T15:00:00 Last Updated: 2024-08-05T23:17:50.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82259 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953244
CVE ID: CVE-2016-1986 State: PUBLISHED Published: 2016-02-12T01:00:00 Last Updated: 2024-08-05T23:17:49.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04958567
CVE ID: CVE-2016-1987 State: PUBLISHED Published: 2016-02-18T22:00:00 Last Updated: 2024-08-05T23:17:49.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04974114 - http://www.securitytracker.com/id/1035026
CVE ID: CVE-2016-1988 State: PUBLISHED Published: 2016-03-15T00:00:00 Last Updated: 2024-08-05T23:17:50.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1989. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05030906 - http://www.securitytracker.com/id/1035192
CVE ID: CVE-2016-1989 State: PUBLISHED Published: 2016-03-15T00:00:00 Last Updated: 2024-08-05T23:17:50.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1988. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05030906 - http://www.securitytracker.com/id/1035192
CVE ID: CVE-2016-1990 State: PUBLISHED Published: 2016-03-16T10:00:00 Last Updated: 2024-08-05T23:17:49.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452 - http://www.securitytracker.com/id/1035282
CVE ID: CVE-2016-1991 State: PUBLISHED Published: 2016-03-16T10:00:00 Last Updated: 2024-08-05T23:17:50.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048452 - http://www.securitytracker.com/id/1035282
CVE ID: CVE-2016-1992 State: PUBLISHED Published: 2016-03-17T14:00:00 Last Updated: 2024-08-05T23:17:50.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035307 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05048753
CVE ID: CVE-2016-1993 State: PUBLISHED Published: 2016-03-18T10:00:00 Last Updated: 2024-08-05T23:17:50.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035325 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763
CVE ID: CVE-2016-1994 State: PUBLISHED Published: 2016-03-18T10:00:00 Last Updated: 2024-08-05T23:17:50.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035325 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763
CVE ID: CVE-2016-1995 State: PUBLISHED Published: 2016-03-18T10:00:00 Last Updated: 2024-08-05T23:17:49.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035325 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763
CVE ID: CVE-2016-1996 State: PUBLISHED Published: 2016-03-18T10:00:00 Last Updated: 2024-08-05T23:17:50.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035325 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763
CVE ID: CVE-2016-1997 State: PUBLISHED Published: 2016-03-22T10:00:00 Last Updated: 2024-08-05T23:17:49.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05050545
CVE ID: CVE-2016-1998 State: PUBLISHED Published: 2016-03-22T10:00:00 Last Updated: 2024-08-05T23:17:49.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054565
CVE ID: CVE-2016-1999 State: PUBLISHED Published: 2016-05-30T01:00:00 Last Updated: 2024-08-05T23:17:50.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in HP Release Control 9.13, 9.20, and 9.21 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05063986 - http://www.securityfocus.com/bid/90778
CVE ID: CVE-2016-20001 State: PUBLISHED Published: 2020-12-31T23:27:27 Last Updated: 2024-08-06T03:47:35.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2744889
CVE ID: CVE-2016-20002 State: PUBLISHED Published: 2020-12-31T23:27:19 Last Updated: 2024-08-06T03:47:34.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2744889
CVE ID: CVE-2016-20003 State: PUBLISHED Published: 2020-12-31T23:27:10 Last Updated: 2024-08-06T03:47:34.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2744889
CVE ID: CVE-2016-20004 State: PUBLISHED Published: 2020-12-31T23:27:02 Last Updated: 2024-08-06T03:47:34.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2744889
CVE ID: CVE-2016-20005 State: PUBLISHED Published: 2020-12-31T23:26:53 Last Updated: 2024-08-06T03:47:34.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2744889
CVE ID: CVE-2016-20006 State: PUBLISHED Published: 2020-12-31T23:26:46 Last Updated: 2024-08-06T03:47:34.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST/JSON project 7.x-1.x for Drupal allows blockage of user logins, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2744889
CVE ID: CVE-2016-20007 State: PUBLISHED Published: 2020-12-31T23:26:37 Last Updated: 2024-08-06T03:47:35.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2744889
CVE ID: CVE-2016-20008 State: PUBLISHED Published: 2020-12-31T23:26:25 Last Updated: 2024-08-06T03:47:34.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2744889
CVE ID: CVE-2016-20009 State: PUBLISHED Published: 2021-03-11T21:39:25 Last Updated: 2024-08-06T03:47:34.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://blog.exodusintel.com/2016/08/09/vxworks-execute-my-packets/ - https://cert-portal.siemens.com/productcert/pdf/ssa-553445.pdf
CVE ID: CVE-2016-20010 State: PUBLISHED Published: 2021-05-05T13:42:25 Last Updated: 2024-08-06T03:47:34.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2016/06/vulnerability-ewww-image-optimizer/ - https://plugins.trac.wordpress.org/browser/ewww-image-optimizer/trunk/changelog.txt
CVE ID: CVE-2016-20011 State: PUBLISHED Published: 2021-05-25T20:09:43 Last Updated: 2024-08-06T03:47:35.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the default behavior of SoupSessionSync. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=772647 - https://gitlab.gnome.org/GNOME/libgrss/-/issues/4 - https://gitlab.gnome.org/GNOME/libgrss/-/merge_requests/7.patch
CVE ID: CVE-2016-20012 State: PUBLISHED Published: 2021-09-15T19:32:11 Last Updated: 2024-08-06T03:47:34.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openssh/openssh-portable/pull/270 - https://github.com/openssh/op
VE Program Container: References: - https://github.com/openssh/openssh-portable/pull/270 - https://github.com/openssh/openssh-portable/blob/d0fffc88c8fe90c1815c6f4097bc8cbcabc0f3dd/auth2-pubkey.c#L261-L265 - https://utcc.utoronto.ca/~cks/space/blog/tech/SSHKeysAreInfoLeak - https://rushter.com/blog/public-ssh-keys/ - https://security.netapp.com/advisory/ntap-20211014-0005/ - https://github.com/openssh/openssh-portable/pull/270#issuecomment-920577097 - https://www.openwall.com/lists/oss-security/2018/08/24/1 - https://github.com/openssh/openssh-portable/pull/270#issuecomment-943909185
CVE ID: CVE-2016-20013 State: PUBLISHED Published: 2022-02-19T04:17:39 Last Updated: 2024-08-06T03:47:34.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/solardiz/status/795601240151457793 - https://pthree.org/2018/05/23/do-not-use-sha256crypt-sha512crypt-theyre-dangerous/ - https://akkadia.org/drepper/SHA-crypt.txt
CVE ID: CVE-2016-20014 State: PUBLISHED Published: 2022-04-21T03:58:30 Last Updated: 2024-08-06T03:47:34.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kravietz/pam_tacplus/commit/e4c00eba70a0f72c4de77b5f072c69708ec2beab
CVE ID: CVE-2016-20015 State: PUBLISHED Published: 2022-09-20T17:01:47.000Z Last Updated: 2025-05-29T13:24:16.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.gentoo.org/602652
CVE ID: CVE-2016-20016 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:57:36.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote unauthenticated attacker can execute arbitrary operating system commands as root. This vulnerability has also been referred to as the "JAWS webserver RCE" because of the easily identifying HTTP response server field. Other firmware versions, at least from 2014 through 2019, can be affected. This was exploited in the wild in 2017 through 2022. Additional Analyst Notes: - CVE Program C
gh 2019, can be affected. This was exploited in the wild in 2017 through 2022. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pentestpartners.com/security-blog/pwning-cctv-cameras/ - https://blog.netlab.360.com/iot_reaper-a-rappid-spreading-new-iot-botnet-en/ - https://www.exploit-db.com/exploits/41471
CVE ID: CVE-2016-20017 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-10-21T23:15:33.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10088 - https://seclists.org/fulldisclosure/2016/Feb/53 - https://www.exploit-db.com/exploits/44760
CVE ID: CVE-2016-20018 State: PUBLISHED Published: 2022-12-19T00:00:00 Last Updated: 2024-08-06T03:47:34.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query. Additional Analyst Notes: - CVE Program Container: References: - https://www.ghostccamm.com/blog/knex_sqli/ - https://github.com/knex/knex/issues/1227 - https://nvd.nist.gov/vuln/detail/CVE-2016-20018
CVE ID: CVE-2016-20021 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-03T14:07:01.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.gentoo.org/wiki/Portage - https://gitweb.gentoo.org/proj/portage.git/tree/NEWS - https://bugs.gentoo.org/597800
CVE ID: CVE-2016-20022 State: PUBLISHED Published: 2024-06-27T00:00:00.000Z Last Updated: 2025-03-13T17:18:45.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: This vulnerability only affects products that are no longer supported by the supplier. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lore.kernel.org/lkml/1486322541-8206-8-git-send-email-w%401wt.eu/ - https://www.spinics.net/lists/linux-usb/msg144177.html - https://github.com/torvalds/linux/commit/aed9d65ac3278d4febd
- https://www.spinics.net/lists/linux-usb/msg144177.html - https://github.com/torvalds/linux/commit/aed9d65ac3278d4febd8665bd7db59ef53e825fe
CVE ID: CVE-2016-2000 State: PUBLISHED Published: 2016-04-05T01:00:00 Last Updated: 2024-08-05T23:17:49.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05064889
CVE ID: CVE-2016-2001 State: PUBLISHED Published: 2016-04-12T23:00:00 Last Updated: 2024-08-05T23:17:49.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073504 - http://www.securitytracker.com/id/1035505
CVE ID: CVE-2016-2002 State: PUBLISHED Published: 2016-04-20T17:00:00 Last Updated: 2024-08-05T23:17:49.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-16-244/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085303
CVE ID: CVE-2016-2003 State: PUBLISHED Published: 2016-04-20T17:00:00 Last Updated: 2024-08-05T23:17:50.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085438
CVE ID: CVE-2016-2004 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T23:17:49.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/267328 - https://www.exploit-db.com/exploits/39874/ - http://packetstormsecurity.com/files/137199/HP-Data-Protector-A.09.00-Command-Execution.html - http://packetstormsecurity
ttp://packetstormsecurity.com/files/137199/HP-Data-Protector-A.09.00-Command-Execution.html - http://packetstormsecurity.com/files/137341/HP-Data-Protector-Encrypted-Communication-Remote-Command-Execution.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988 - https://www.exploit-db.com/exploits/39858/ - http://www.securitytracker.com/id/1035631
CVE ID: CVE-2016-2005 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T23:17:50.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-245 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988 - http://www.securitytracker.com/id/1035631