Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rver before 16.12.1, Sizer for Microsoft Lync Server 2013 before 16.12.1, Sizer for Microsoft SharePoint 2013 before 16.13.1, Sizer for Microsoft SharePoint 2010 before 16.11.1, and Sizer for Microsoft Skype for Business Server 2015 before 16.5.1 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92479 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05237578
CVE ID: CVE-2016-4378 State: PUBLISHED Published: 2016-08-26T19:00:00 Last Updated: 2024-08-06T00:25:14.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (HAD) components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05241355 - http://www
ner: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05241355 - http://www.securitytracker.com/id/1036686 - http://www.securityfocus.com/bid/92649
CVE ID: CVE-2016-4379 State: PUBLISHED Published: 2016-09-08T16:00:00 Last Updated: 2024-08-06T00:25:14.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036707 - https://www.iacr.org/archive/eurocrypt2002/23320530/cbc02_e02d.pdf - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=
archive/eurocrypt2002/23320530/cbc02_e02d.pdf - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05249760 - http://www.securityfocus.com/bid/92696
CVE ID: CVE-2016-4380 State: PUBLISHED Published: 2016-09-08T16:00:00 Last Updated: 2024-08-06T00:25:14.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05249833 - http://www.securitytracker.com/id/1036716 - http://www.securityfocus.com/bid/92698
CVE ID: CVE-2016-4381 State: PUBLISHED Published: 2016-09-08T16:00:00 Last Updated: 2024-08-06T00:25:14.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled, allows local users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05257711 - http://www.securityfocus.com/bid/92733
CVE ID: CVE-2016-4382 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-06T00:25:14.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user validation failure" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036770 - http://www.securityfocus.com/bid/92915 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05269356
CVE ID: CVE-2016-4383 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T00:25:14.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93106 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05273584 - https://wiki.openstack.org/wiki/OSSN/OSSN-0075 - https://bugs.launchpad.net/glance/+bug/1593799/
CVE ID: CVE-2016-4384 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-06T00:25:14.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05278882 - http://www.securitytracker.com/id/1036859 - http://www.securityfocus.com/bid/93069 - https://www.tenable.com/security/research/tra-2016-26 - http://www.securitytracker.com/id/1036860
CVE ID: CVE-2016-4385 State: PUBLISHED Published: 2016-09-29T14:00:00 Last Updated: 2024-08-06T00:25:14.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05279098 - http://www.zerodayinitiative.com/advisories/ZDI-16-523/ - https://www.tenable.com/security/research/
=emr_na-c05279098 - http://www.zerodayinitiative.com/advisories/ZDI-16-523/ - https://www.tenable.com/security/research/tra-2016-27 - http://www.securityfocus.com/bid/93109
CVE ID: CVE-2016-4386 State: PUBLISHED Published: 2016-09-29T14:00:00 Last Updated: 2024-08-06T00:25:14.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05281739 - http://www.securityfocus.com/bid/93218 - http://www.securitytracker.com/id/1036929
CVE ID: CVE-2016-4387 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T00:25:14.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4388, CVE-2016-4389, and CVE-2016-4390. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036935 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477 - http://www.securityfocus.com/bid/93424
CVE ID: CVE-2016-4388 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T00:25:14.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-4390. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036935 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477 - http://www.securityfocus.com/bid/93424
CVE ID: CVE-2016-4389 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T00:25:14.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4390. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036935 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477 - http://www.securityfocus.com/bid/93424
CVE ID: CVE-2016-4390 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T00:25:14.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4389. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036935 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477 - http://www.securityfocus.com/bid/93424
CVE ID: CVE-2016-4391 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.575Z Vendors: Hewlett Packard Enterprise Products: HP ArcSight WINC Connector Problem Types: remote code execution Description: A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05313743 - http://www.securityfocus.com/bid/93789 - http://www.securitytracker.com/id/1037068
CVE ID: CVE-2016-4392 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.519Z Vendors: Hewlett Packard Enterprise Products: HP Business Service Manager Problem Types: remote cross-site scripting (XSS) Description: A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05316329 - http://www.securityfocus.com/bid/93933 - http://www.securitytracker.com/id/1037127
CVE ID: CVE-2016-4393 State: PUBLISHED Published: 2016-10-28T21:00:00 Last Updated: 2024-08-06T00:25:14.538Z Vendors: HPE Products: HPE System Management Homepage before v7.6 Problem Types: XSS Description: HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93961 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
CVE ID: CVE-2016-4394 State: PUBLISHED Published: 2016-10-28T21:00:00 Last Updated: 2024-08-06T00:25:14.483Z Vendors: HPE Products: HPE System Management Homepage before v7.6 Problem Types: HSTS Description: HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93961 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
CVE ID: CVE-2016-4395 State: PUBLISHED Published: 2016-10-28T21:00:00 Last Updated: 2024-08-06T00:25:14.516Z Vendors: HPE Products: HPE System Management Homepage before v7.6 Problem Types: Buffer Overflow Description: HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-587 - http://www.securityfocus.com/bid/93961 - https://www.tenable.com/security/research/tra-2016-32 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20564.
tra-2016-32 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
CVE ID: CVE-2016-4396 State: PUBLISHED Published: 2016-10-28T21:00:00 Last Updated: 2024-08-06T00:25:14.531Z Vendors: HPE Products: HPE System Management Homepage before v7.6 Problem Types: Buffer Overflow Description: HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93961 - https://www.tenable.com/security/research/tra-2016-32 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c053201
c/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149 - http://www.zerodayinitiative.com/advisories/ZDI-16-588
CVE ID: CVE-2016-4397 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.517Z Vendors: Hewlett Packard Enterprise Products: HP Network Node Manager (NNMi) Problem Types: local code execution Description: A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10.00, v10.10 and v10.20 Software. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037234 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05325811 - http://www.securityfocus.com/bid/94154 - http://www.securityfocus.com/bid/95080
CVE ID: CVE-2016-4398 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.532Z Vendors: Hewlett Packard Enterprise Products: HP Network Node Manager (NNMi) Problem Types: remote arbitrary code execution Description: A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10 using Java Deserialization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94195 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05325823
CVE ID: CVE-2016-4399 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.527Z Vendors: Hewlett Packard Enterprise Products: HP Network Node Manager (NNMi) Problem Types: cross site scripting (XSS) Description: A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94195 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05325823 - http://www.securitytracker.com/id/1037232
CVE ID: CVE-2016-4400 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.586Z Vendors: Hewlett Packard Enterprise Products: HP Network Node Manager (NNMi) Problem Types: cross site scripting (XSS) Description: A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94195 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05325823 - http://www.securitytracker.com/id/1037232
CVE ID: CVE-2016-4401 State: PUBLISHED Published: 2019-11-06T14:32:30 Last Updated: 2024-08-06T00:25:14.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-010.txt
CVE ID: CVE-2016-4402 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.523Z Vendors: Hewlett Packard Enterprise Products: HP Keyview Problem Types: remote code execution via buffer overflow Description: A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05325836 - http://www.securityfocus.com/bid/94184 - http://www.securitytracker.com/id/1037235
CVE ID: CVE-2016-4403 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.551Z Vendors: Hewlett Packard Enterprise Products: HP Keyview Problem Types: remote code execution via memory corruption Description: A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05325836 - http://www.securityfocus.com/bid/94184 - http://www.securitytracker.com/id/1037235
CVE ID: CVE-2016-4404 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.537Z Vendors: Hewlett Packard Enterprise Products: HP Keyview Problem Types: remote code execution via a memory allocation issue Description: A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via a memory allocation issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05325836 - http://www.securityfocus.com/bid/94184 - http://www.securitytracker.com/id/1037235
CVE ID: CVE-2016-4405 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.524Z Vendors: Hewlett Packard Enterprise Products: HP Business Service Manager Problem Types: remote code execution Description: A remote code execution vulnerability was identified in HP Business Service Management (BSM) using Apache Commons Collection Java Deserialization versions v9.20-v9.26 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94183 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05327447
CVE ID: CVE-2016-4406 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-06T00:25:14.527Z Vendors: Hewlett Packard Enterprise Products: HP Integrated Lights-Out 3 (iLO 3), HPE Integrated Lights-Out 4 (iLO 4) Problem Types: cross site scripting (XSS) Description: A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05337025 - http://www.securitytracker.com/id/1037318 - http://www.securityfocus.com/bid/94426
CVE ID: CVE-2016-4407 State: PUBLISHED Published: 2016-10-13T14:00:00 Last Updated: 2024-08-06T00:25:14.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors, aka SAP Security Note 2223008. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93502 - http://seclists.org/fulldisclosure/2016/Oct/32 - https://www.onapsis.com/research/security-advisories/sap-missing-signature-check-dsa-algorithm
CVE ID: CVE-2016-4412 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T00:25:14.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the user's valid phpMyAdmin token. All 4.0.x versions (prior to 4.0.10.16) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94519 - https://www.phpmyadmin.net/security/PMASA-2016-57 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-4414 State: PUBLISHED Published: 2016-06-13T19:00:00 Last Updated: 2024-08-06T00:25:14.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/04/30/4 - https://github.com/quassel/quassel/commit/e678873 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00063.html - http://quassel-irc.org/node/129 - http://lists.fedoraproject.org/pipermail/package-announce/20
s/2016-05/msg00063.html - http://quassel-irc.org/node/129 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183746.html - http://www.openwall.com/lists/oss-security/2016/04/30/2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183571.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183585.html
CVE ID: CVE-2016-4415 State: PUBLISHED Published: 2016-05-01T01:00:00Z Last Updated: 2024-09-16T23:06:18.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2016-12.html - https://code.google.com/p/google-security-research/issues/detail?id=647 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11795
CVE ID: CVE-2016-4416 State: PUBLISHED Published: 2016-05-01T01:00:00Z Last Updated: 2024-09-16T23:00:45.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11818 - https://www.wireshark.org/security/wnpa-sec-2016-13.html
CVE ID: CVE-2016-4417 State: PUBLISHED Published: 2016-05-01T01:00:00 Last Updated: 2024-08-06T00:25:14.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet that triggers a 0xff tag value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html - https://www.wireshark.org/security/wnpa-sec-2016-14.html - http://lists.opensuse.org/opensuse-updates/2016-0
0016.html - https://www.wireshark.org/security/wnpa-sec-2016-14.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11825 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html