Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0846 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider the heap size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26877992. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39686/ - https://android.googlesource.com/platform/frameworks/native/+/f31
rences: - https://www.exploit-db.com/exploits/39686/ - https://android.googlesource.com/platform/frameworks/native/+/f3199c228aced7858b75a8070b8358c155ae0149 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0847 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/services/Telephony/+/a294ae5342410431a568126183efe86261668b5d - https://android.googlesource.com/platform/packages/services/Te
es/Telephony/+/a294ae5342410431a568126183efe86261668b5d - https://android.googlesource.com/platform/packages/services/Telecomm/+/2750faaa1ec819eed9acffea7bd3daf867fda444 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0848 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to bypass private-storage file-access restrictions via a crafted application that changes a symlink target, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26211054. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bdc831357e7a116bc561d51bf2ddc85ff11c0
- https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bdc831357e7a116bc561d51bf2ddc85ff11c01a9 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0849 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26960931. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/bootable/recovery/+/28a566f7731b4cb76d2a9ba16d997ac5aeb07dad - http://source.android.com/security/bulletin/2016-04-02.
m/bootable/recovery/+/28a566f7731b4cb76d2a9ba16d997ac5aeb07dad - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0850 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to bypass intended pairing restrictions via a crafted device, aka internal bug 26551752. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/bluetooth/bluedroid/+/c677ee92595335233eb0e7b59809a1a94e7a678a - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0851 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds memory access) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
CVE ID: CVE-2016-0852 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative requirement and obtain file or folder access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
CVE ID: CVE-2016-0853 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech WebAccess before 8.1 allows remote attackers to obtain sensitive information via crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
CVE ID: CVE-2016-0854 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39735/ - http://www.zerodayinitiative.com/advisories/ZDI-16-127 - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 - http://www.zerodayinitiative.com/advisories/ZDI-16
ZDI-16-127 - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 - http://www.zerodayinitiative.com/advisories/ZDI-16-128 - http://www.rapid7.com/db/modules/exploit/windows/scada/advantech_webaccess_dashboard_file_upload - http://www.zerodayinitiative.com/advisories/ZDI-16-129
CVE ID: CVE-2016-0855 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-126 - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 - http://www.zerodayinitiative.com/advisories/ZDI-16-124 - http://www.zerodayinitiative.com/advisories/ZDI-16-125 - http://www.zerodayinitiative.com/advisories/ZDI-16-122 - http://www.zerodayiniti
yinitiative.com/advisories/ZDI-16-125 - http://www.zerodayinitiative.com/advisories/ZDI-16-122 - http://www.zerodayinitiative.com/advisories/ZDI-16-123
CVE ID: CVE-2016-0856 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-112 - http://www.zerodayinitiative.com/advisories/ZDI-16-101 - http://www.zerodayinitiative.com/advisories/ZDI-16-118 - http://www.zerodayinitiative.com/advisories/ZDI-16-120 - http://www.zerodayinitiative.com/advisories/ZDI-16-116 - http://www.zerodayinitiative.com/adv
om/advisories/ZDI-16-120 - http://www.zerodayinitiative.com/advisories/ZDI-16-116 - http://www.zerodayinitiative.com/advisories/ZDI-16-108 - http://www.zerodayinitiative.com/advisories/ZDI-16-102 - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 - http://www.zerodayinitiative.com/advisories/ZDI-16-113 - http://www.zerodayinitiative.com/advisories/ZDI-16-103 - http://www.zerodayinitiative.com/advisories/ZDI-16-117 - http://www.zerodayinitiative.com/advisories/ZDI-16-115 - http://www.zerodayinitiative.com/advisories/ZDI-16-106 - http://www.zerodayinitiative.com/advisories/ZDI-16-114 - http://www.zerodayinitiative.com/advisories/ZDI-16-110 - http://www.zerodayinitiative.com/advisories/ZD
ies/ZDI-16-114 - http://www.zerodayinitiative.com/advisories/ZDI-16-110 - http://www.zerodayinitiative.com/advisories/ZDI-16-109 - http://www.zerodayinitiative.com/advisories/ZDI-16-100 - http://www.zerodayinitiative.com/advisories/ZDI-16-111
CVE ID: CVE-2016-0857 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-121 - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 - http://www.zerodayinitiative.com/advisories/ZDI-16-107 - http://www.zerodayinitiative.com/advisories/ZDI-16-119
CVE ID: CVE-2016-0858 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-105 - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
CVE ID: CVE-2016-0859 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted RPC request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 - http://www.zerodayinitiative.com/advisories/ZDI-16-104
CVE ID: CVE-2016-0860 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T22:30:05.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service via a crafted RPC request. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-074 - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 - http://www.zerodayinitiative.com/advisories/ZDI-16-058
CVE ID: CVE-2016-0861 State: PUBLISHED Published: 2016-02-05T11:00:00 Last Updated: 2024-08-05T22:30:05.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf - http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html - http://seclists.org/fulldisclosure/2016/Feb/21 - h
586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html - http://seclists.org/fulldisclosure/2016/Feb/21 - https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02 - https://www.exploit-db.com/exploits/39408/
CVE ID: CVE-2016-0862 State: PUBLISHED Published: 2016-02-05T11:00:00 Last Updated: 2024-08-05T22:30:05.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf - http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html - http://seclists.org/fulldisclo
curity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html - http://seclists.org/fulldisclosure/2016/Feb/21 - https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02 - https://www.exploit-db.com/exploits/39408/
CVE ID: CVE-2016-0863 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T22:30:05.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
CVE ID: CVE-2016-0864 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T22:30:05.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
CVE ID: CVE-2016-0865 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T22:30:05.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
CVE ID: CVE-2016-0866 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T22:30:05.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
CVE ID: CVE-2016-0867 State: PUBLISHED Published: 2016-01-30T15:00:00 Last Updated: 2024-08-05T22:30:05.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-021-01
CVE ID: CVE-2016-0868 State: PUBLISHED Published: 2016-01-28T21:00:00 Last Updated: 2024-08-05T22:30:05.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034861 - https://ics-cert.us-cert.gov/advisories/ICSA-16-026-02
CVE ID: CVE-2016-0869 State: PUBLISHED Published: 2016-01-26T19:00:00 Last Updated: 2024-08-05T22:30:05.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a denial of service via a malformed HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.promotic.eu/en/pmdoc/NewsPm803.htm#ver80311 - https://ics-cert.us-cert.gov/advisories/ICSA-16-026-01
CVE ID: CVE-2016-0870 State: PUBLISHED Published: 2016-09-19T01:00:00 Last Updated: 2024-08-05T22:30:05.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-259-03 - http://www.securityfocus.com/bid/92979
CVE ID: CVE-2016-0871 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:30:05.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-061-03
CVE ID: CVE-2016-0872 State: PUBLISHED Published: 2017-11-07T21:00:00 Last Updated: 2024-08-05T22:30:05.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral (WDC) versions prior to Version 3.4.0. WDC stores password credentials in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07
CVE ID: CVE-2016-0875 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-05T22:30:05.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-042-01
CVE ID: CVE-2016-0876 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-05T22:30:05.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-042-01
CVE ID: CVE-2016-0877 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-05T22:30:05.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) by executing the ping function. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-042-01
CVE ID: CVE-2016-0878 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-05T22:30:05.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-042-01
CVE ID: CVE-2016-0879 State: PUBLISHED Published: 2016-05-31T01:00:00 Last Updated: 2024-08-05T22:30:05.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-042-01
CVE ID: CVE-2016-0880 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0881 State: PUBLISHED Published: 2016-02-12T01:00:00 Last Updated: 2024-08-05T22:30:05.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034993 - http://seclists.org/bugtraq/2016/Feb/66
CVE ID: CVE-2016-0882 State: PUBLISHED Published: 2016-02-12T01:00:00 Last Updated: 2024-08-05T22:30:05.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034993 - http://seclists.org/bugtraq/2016/Feb/66
CVE ID: CVE-2016-0883 State: PUBLISHED Published: 2016-09-18T01:00:00 Last Updated: 2024-08-05T22:30:05.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/pcf-ops-manager-weak-authentication-scheme
CVE ID: CVE-2016-0884 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0885 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0886 State: PUBLISHED Published: 2016-03-09T23:00:00 Last Updated: 2024-08-05T22:38:39.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcp_member API call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84210 - http://seclists.org/bugtraq/2016/Mar/44 - http://www.securitytracker.com/id/1035197
CVE ID: CVE-2016-0887 State: PUBLISHED Published: 2016-04-12T23:00:00 Last Updated: 2024-08-05T22:38:39.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before 6.2.1, and RSA BSAFE SSL-C before 2.8.9 allow remote attackers to discover a private-key prime by conducting a Lenstra side-channel attack that leverages an application's failure to detect an RSA signature failure during a TLS session. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Ap
ring a TLS session. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Apr/66 - http://www.securitytracker.com/id/1035515 - http://www.securityfocus.com/archive/1/538055/100/0/threaded - http://www.securitytracker.com/id/1035516 - http://packetstormsecurity.com/files/136656/RSA-BSAFE-Lenstras-Attack.html - http://www.securitytracker.com/id/1035517
CVE ID: CVE-2016-0888 State: PUBLISHED Published: 2016-04-07T10:00:00 Last Updated: 2024-08-05T22:38:40.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Apr/20 - http://www.securitytracker.com/id/1035459