Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
0/threaded - http://packetstormsecurity.com/files/135721/Exponent-2.3.7-PHP-Code-Execution.html - https://www.htbridge.com/advisory/HTB23290
CVE ID: CVE-2016-2243 State: PUBLISHED Published: 2016-03-04T15:00:00 Last Updated: 2024-08-05T23:24:48.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service (BIOS recovery failure) by leveraging administrative access. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05012469 - http://www.securitytracker.com/id/1035193 - https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05012469
CVE ID: CVE-2016-2244 State: PUBLISHED Published: 2016-03-04T15:00:00 Last Updated: 2024-08-05T23:24:48.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035191 - https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05030353 - https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05030353
CVE ID: CVE-2016-2245 State: PUBLISHED Published: 2016-03-19T15:00:00 Last Updated: 2024-08-05T23:24:48.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05031674
CVE ID: CVE-2016-2246 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-05T23:24:48.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05291676 - http://www.securityfocus.com/bid/93904 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05291676
CVE ID: CVE-2016-2247 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2248 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2249 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2250 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2251 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2252 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2253 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2254 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2255 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2256 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2257 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2258 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2259 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2260 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2261 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2262 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2263 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2264 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2265 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2266 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2267 State: REJECTED Published: 2017-01-02T09:46:00 Last Updated: 2017-01-02T09:57:01 Description: No description available.
CVE ID: CVE-2016-2268 State: PUBLISHED Published: 2016-02-08T19:00:00 Last Updated: 2024-08-05T23:24:48.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://itunes.apple.com/us/app/dell-secureworks/id533072046 - http://packetstormsecurity.com/files/135617/Dell-SecureWorks-iOS-Certificate-Validation-Failure.html - http://www.securityfocus.com/archive/1/537445/100/0/threaded - http://seclists.org/fulldisclosure/2016/Feb/
ilure.html - http://www.securityfocus.com/archive/1/537445/100/0/threaded - http://seclists.org/fulldisclosure/2016/Feb/27 - http://www.info-sec.ca/advisories/Dell-SecureWorks.html
CVE ID: CVE-2016-2270 State: PUBLISHED Published: 2016-02-19T16:00:00 Last Updated: 2024-08-05T23:24:48.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.debian.org/security/2016/dsa-3519 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html - http://lists.fedoraproject.org/pipermail/package-announce/2
t.org/pipermail/package-announce/2016-February/177990.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html - http://xenbits.xen.org/xsa/advisory-154.html - http://www.securitytracker.com/id/1035042 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2016-2271 State: PUBLISHED Published: 2016-02-19T16:00:00 Last Updated: 2024-08-05T23:24:48.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3519 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html - http://www.securitytracker.com/id/1035043 - http://xenbits.xen.org/xsa/
ermail/package-announce/2016-March/178518.html - http://www.securitytracker.com/id/1035043 - http://xenbits.xen.org/xsa/advisory-170.html - http://support.citrix.com/article/CTX209443 - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2016-2272 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T23:24:48.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-061-03
CVE ID: CVE-2016-2273 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2274 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-05T23:24:48.456Z Vendors: n/a Products: Adcon Telemetry A850 Telemetry Gateway Base Station Problem Types: Adcon Telemetry A850 Telemetry Gateway Base Station XSS Description: An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94781 - https://ics-cert.us-cert.gov/advisories/ICSA-16-343-03
CVE ID: CVE-2016-2275 State: PUBLISHED Published: 2016-02-21T02:00:00 Last Updated: 2024-08-05T23:24:49.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-049-01
CVE ID: CVE-2016-2276 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2277 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T23:24:48.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-056-01
CVE ID: CVE-2016-2278 State: PUBLISHED Published: 2016-03-02T11:00:00 Last Updated: 2024-08-05T23:24:48.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeating an msh (aka Minimal Shell) protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2016-025-01 - https://ics-cert.us-cert.gov/advisories/ICSA-16-061-01 - https://www.exploit-db.com/exploits/39522/
CVE ID: CVE-2016-2279 State: PUBLISHED Published: 2016-03-02T11:00:00 Last Updated: 2024-08-05T23:24:48.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035190 - https://www.exploit-db.com/exploits/44626/ - https://ics-cert.us-cert.gov/advisories/ICSA-16-061-02
CVE ID: CVE-2016-2280 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T23:24:48.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial of service (service outage) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-070-02
CVE ID: CVE-2016-2281 State: PUBLISHED Published: 2016-03-18T14:00:00 Last Updated: 2024-08-05T23:24:48.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-077-01
CVE ID: CVE-2016-2282 State: PUBLISHED Published: 2016-03-04T15:00:00 Last Updated: 2024-08-05T23:24:48.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01
CVE ID: CVE-2016-2283 State: PUBLISHED Published: 2016-03-04T15:00:00 Last Updated: 2024-08-05T23:24:48.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01
CVE ID: CVE-2016-2284 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2285 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-05T23:24:48.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure
of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/7 - https://ics-cert.us-cert.gov/advisories/ICSA-16-145-01
CVE ID: CVE-2016-2286 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-05T23:24:48.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 have a blank default password, which allows remote attackers to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/7 - https:/
Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/7 - https://ics-cert.us-cert.gov/advisories/ICSA-16-145-01
CVE ID: CVE-2016-2287 State: PUBLISHED Published: 2016-03-19T10:00:00 Last Updated: 2024-08-05T23:24:48.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-342-01
CVE ID: CVE-2016-2288 State: PUBLISHED Published: 2016-03-29T15:00:00 Last Updated: 2024-08-05T23:24:48.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39630/ - https://ics-cert.us-cert.gov/advisories/ICSA-16-084-01
CVE ID: CVE-2016-2289 State: PUBLISHED Published: 2016-04-01T23:00:00 Last Updated: 2024-08-05T23:24:48.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently discover password hashes, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-091-01
CVE ID: CVE-2016-2290 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T23:24:48.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
CVE ID: CVE-2016-2291 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T23:24:48.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
CVE ID: CVE-2016-2292 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T23:24:48.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
CVE ID: CVE-2016-2293 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T23:24:48.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover settings via a direct request to an unspecified URL. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02
CVE ID: CVE-2016-2294 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T23:24:48.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover a cleartext mail-server password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02
CVE ID: CVE-2016-2295 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-05T23:24:48.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allow remote attackers to obtain sensitive cleartext information by reading a configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/7 - https://ics-
ional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/7 - https://ics-cert.us-cert.gov/advisories/ICSA-16-145-01
CVE ID: CVE-2016-2296 State: PUBLISHED Published: 2016-05-14T16:00:00 Last Updated: 2024-08-05T23:24:48.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/52 - https://www.exploit-db.com/exploits/39822/ - https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01
CVE ID: CVE-2016-2297 State: PUBLISHED Published: 2016-05-14T16:00:00 Last Updated: 2024-08-05T23:24:48.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature." Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/52 - https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01
CVE ID: CVE-2016-2298 State: PUBLISHED Published: 2016-05-14T16:00:00 Last Updated: 2024-08-05T23:24:48.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/52 - https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01
CVE ID: CVE-2016-2299 State: PUBLISHED Published: 2016-04-22T00:00:00 Last Updated: 2024-08-05T23:24:48.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-236 - http://www.zerodayinitiative.com/advisories/ZDI-16-238 - http://www.zerodayinitiative.com/advisories/ZDI-16-237 - https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03 - http://www.zerodayinitiative.com/advisories/ZDI-16-239 - http://www.zerodayinitiative.
t.gov/advisories/ICSA-16-105-03 - http://www.zerodayinitiative.com/advisories/ZDI-16-239 - http://www.zerodayinitiative.com/advisories/ZDI-16-240
CVE ID: CVE-2016-2300 State: PUBLISHED Published: 2016-04-22T00:00:00 Last Updated: 2024-08-05T23:24:48.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03
CVE ID: CVE-2016-2301 State: PUBLISHED Published: 2016-04-22T00:00:00 Last Updated: 2024-08-05T23:24:48.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03
CVE ID: CVE-2016-2302 State: PUBLISHED Published: 2016-04-22T00:00:00 Last Updated: 2024-08-05T23:24:48.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03