Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-11036 State: PUBLISHED Published: 2020-04-07T13:23:11 Last Updated: 2024-08-06T03:47:34.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with M(6.0) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2016-6008 (August 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11037 State: REJECTED Published: 2020-04-07T13:18:20 Last Updated: 2020-04-07T13:48:51 Description: No description available.
CVE ID: CVE-2016-11038 State: PUBLISHED Published: 2020-04-07T13:17:05 Last Updated: 2024-08-06T03:47:34.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung Professional Audio SDK). The Jack audio service doesn't implement access control for shared memory, leading to arbitrary code execution or privilege escalation. The Samsung ID is SVE-2016-5953 (July 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11039 State: PUBLISHED Published: 2020-04-07T13:09:06 Last Updated: 2024-08-06T03:47:34.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP MDM9x35, or Qualcomm Onechip) software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 (July 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11040 State: PUBLISHED Published: 2020-04-07T13:07:08 Last Updated: 2024-08-06T03:47:34.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.0/5.1) (with USB OTG MyFile2014_L_ESS support) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2015-5068 (June 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11041 State: PUBLISHED Published: 2020-04-07T12:55:21 Last Updated: 2024-08-06T03:47:34.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with KK(4.4) software. Attackers can bypass the lockscreen by sending an AT command over USB. The Samsung ID is SVE-2015-5301 (June 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11042 State: PUBLISHED Published: 2020-04-07T12:54:19 Last Updated: 2024-08-06T03:47:34.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. There is a SIM Lock bypass. The Samsung ID is SVE-2016-5381 (June 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11043 State: PUBLISHED Published: 2020-04-07T12:53:17 Last Updated: 2024-08-06T03:47:34.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with M(6.0) software. The S/MIME implementation in EAS uses DES (where 3DES is intended). The Samsung ID is SVE-2016-5871 (June 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11044 State: PUBLISHED Published: 2020-04-07T12:51:58 Last Updated: 2024-08-06T03:47:34.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (with Fingerprint support) software. The check of an application's signature can be bypassed during installation. The Samsung ID is SVE-2016-5923 (June 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11045 State: PUBLISHED Published: 2020-04-07T12:50:03 Last Updated: 2024-08-06T03:47:34.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-5317 (May 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11046 State: PUBLISHED Published: 2020-04-07T12:48:24 Last Updated: 2024-08-06T03:47:34.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software. Because of a misused whitelist, attackers can reach the radio layer (aka RIL or RILD) to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 (May 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11047 State: PUBLISHED Published: 2020-04-07T12:46:51 Last Updated: 2024-08-06T03:47:34.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with JBP(4.2) and KK(4.4) (Marvell chipsets) software. The ACIPC-MSOCKET driver allows local privilege escalation via a stack-based buffer overflow. The Samsung ID is SVE-2016-5393 (April 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11048 State: PUBLISHED Published: 2020-04-07T12:45:19 Last Updated: 2024-08-06T03:47:34.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2016-5421 (March 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11049 State: PUBLISHED Published: 2020-04-07T12:44:05 Last Updated: 2024-08-06T03:47:34.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2016-01-16 (Shannon333/308/310 chipsets). The IMEI may be retrieved and modified because of an error in managing key information. The Samsung ID is SVE-2016-5435 (March 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11050 State: PUBLISHED Published: 2020-04-07T12:41:16 Last Updated: 2024-08-06T03:47:34.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 (March 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11051 State: REJECTED Published: 2020-04-07T12:36:57 Last Updated: 2020-06-04T12:53:00 Description: No description available.
CVE ID: CVE-2016-11052 State: PUBLISHED Published: 2020-04-07T12:34:22 Last Updated: 2024-08-06T03:47:34.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. je_free in libQjpeg.so in Qjpeg in Qt 5.5 allows memory corruption via a malformed JPEG file. The Samsung ID is SVE-2015-5110 (January 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11053 State: PUBLISHED Published: 2020-04-07T12:32:19 Last Updated: 2024-08-06T03:47:34.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2015-11-11 (supporting FRP/RL). There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2015-5131 (January 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11054 State: PUBLISHED Published: 2020-04-28T15:57:29 Last Updated: 2024-08-06T03:47:34.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/31245/DGN2200v4-Command-Execution-and-FTP-Insecure-Root-Directory-Security-Vulnerability
CVE ID: CVE-2016-11055 State: PUBLISHED Published: 2020-04-28T15:59:19 Last Updated: 2024-08-06T03:47:34.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/301
CG3000Dv2 before 2017-01-11. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/30114/NETGEAR-Product-Vulnerability-Advisory-CSRF-LocalFile-XSS
CVE ID: CVE-2016-11056 State: PUBLISHED Published: 2020-04-28T16:00:35 Last Updated: 2024-08-06T03:47:33.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and earlier and ReadyNAS Surveillance 1.4.1-3-amd64 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/30275/ReadyNAS-Surveillance-Security-Vulnerability-Announcement
CVE ID: CVE-2016-11057 State: PUBLISHED Published: 2020-04-28T16:11:14 Last Updated: 2024-08-06T03:47:34.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/29960/NETGEAR-Product-Vulnerability-Advisory-Potential-security-issue-
m Container: References: - https://kb.netgear.com/29960/NETGEAR-Product-Vulnerability-Advisory-Potential-security-issue-associated-with-remote-management
CVE ID: CVE-2016-11058 State: PUBLISHED Published: 2020-04-28T16:12:43 Last Updated: 2024-08-06T03:47:34.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/30922/NETGEAR-genie-App-for-Android-Hard-coded-API-Key-and-Session-ID-Vulnerability
CVE ID: CVE-2016-11059 State: PUBLISHED Published: 2020-04-28T16:20:22 Last Updated: 2024-08-06T03:47:34.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before 2017-01-06, D6300 before 2017-01-06, DGN1000v3 before 2017-01-06, DGN2200v1 before 2017-01-06, DGN2200v3 before 2017-01-06, DGN2200V4 before 2017-01-06, DGN2200Bv3 before 2017-01-06, DGN2200Bv4 before 2017-01-06, DGND37
200v3 before 2017-01-06, DGN2200V4 before 2017-01-06, DGN2200Bv3 before 2017-01-06, DGN2200Bv4 before 2017-01-06, DGND3700v1 before 2017-01-06, DGND3700v2 before 2017-01-06, DGND3700Bv2 before 2017-01-06, JNR1010v1 before 2017-01-06, JNR1010v2 before 2017-01-06, JNR3300 before 2017-01-06, JR6100 before 2017-01-06, JR6150 before 2017-01-06, JWNR2000v5 before 2017-01-06, R2000 before 2017-01-06, R6050 before 2017-01-06, R6100 before 2017-01-06, R6200 before 2017-01-06, R6200v2 before 2017-01-06, R6220 before 2017-01-06, R6250 before 2017-01-06, R6300 before 2017-01-06, R6300v2 before 2017-01-06, R6700 before 2017-01-06, R7000 before 2017-01-06, R7900 before 2017-01-06, R7500 before 2017-01-06,
2 before 2017-01-06, R6700 before 2017-01-06, R7000 before 2017-01-06, R7900 before 2017-01-06, R7500 before 2017-01-06, R8000 before 2017-01-06, WGR614v10 before 2017-01-06, WNR1000v2 before 2017-01-06, WNR1000v3 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2000v3 before 2017-01-06, WNR2000v4 before 2017-01-06, WNR2000v5 before 2017-01-06, WNR2200 before 2017-01-06, WNR2500 before 2017-01-06, WNR3500Lv2 before 2017-01-06, WNDR3400v2 before 2017-01-06, WNDR3400v3 before 2017-01-06, WNDR3700v3 before 2017-01-06, WNDR3700v4 before 2017-01-06, WNDR3700v5 before 2017-01-06, WNDR4300 before 2017-01-06, WNDR4300v2 before 2017-01-06, WNDR4500v1 before 2017-01-06, WNDR4500v2 before 2017-01-06,
6, WNDR4300 before 2017-01-06, WNDR4300v2 before 2017-01-06, WNDR4500v1 before 2017-01-06, WNDR4500v2 before 2017-01-06, and WNDR4500v3 before 2017-01-06. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/27253/NETGEAR-Product-Vulnerability-Advisory-Authentication-Bypass-and-Information-Disclosure-on-Home-Routers
CVE ID: CVE-2016-11060 State: PUBLISHED Published: 2020-04-28T16:14:48 Last Updated: 2024-08-06T03:47:34.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/31426/SSL-Renegotiation-Denial-of-Service-Vulnerability
CVE ID: CVE-2016-11061 State: PUBLISHED Published: 2020-04-29T21:23:30 Last Updated: 2024-08-06T03:47:34.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2016/10/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-1-2.pdf
CVE ID: CVE-2016-11062 State: PUBLISHED Published: 2020-06-19T19:21:50 Last Updated: 2024-08-06T03:47:34.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.5.1. E-mail address verification can be bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11063 State: PUBLISHED Published: 2020-06-19T19:22:15 Last Updated: 2024-08-06T03:47:34.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.5.1. XSS can occur via file preview. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11064 State: PUBLISHED Published: 2020-06-19T19:22:33 Last Updated: 2024-08-06T03:47:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Desktop App before 3.4.0. Strings could be executed as code via injection. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11065 State: PUBLISHED Published: 2020-06-19T19:23:02 Last Updated: 2024-08-06T03:47:34.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.3.0. An attacker could use the WebSocket feature to send pop-up messages to users or change a post's appearance. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11066 State: PUBLISHED Published: 2020-06-19T19:23:24 Last Updated: 2024-08-06T03:47:34.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.2.0. The initial_load API disclosed unnecessary personal information. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11067 State: PUBLISHED Published: 2020-06-19T19:24:31 Last Updated: 2024-08-06T03:47:34.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.2.0. It allowed crafted posts that could cause a web browser to hang. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11068 State: PUBLISHED Published: 2020-06-19T19:24:49 Last Updated: 2024-08-06T03:47:34.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11069 State: PUBLISHED Published: 2020-06-19T19:25:13 Last Updated: 2024-08-06T03:47:34.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11070 State: PUBLISHED Published: 2020-06-19T19:25:34 Last Updated: 2024-08-06T03:47:34.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.1.0. It allows XSS via theme color-code values. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11071 State: PUBLISHED Published: 2020-06-19T19:25:54 Last Updated: 2024-08-06T03:47:34.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11072 State: PUBLISHED Published: 2020-06-19T19:26:14 Last Updated: 2024-08-06T03:47:34.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11073 State: PUBLISHED Published: 2020-06-19T19:26:32 Last Updated: 2024-08-06T03:47:34.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11074 State: PUBLISHED Published: 2020-06-19T19:26:52 Last Updated: 2024-08-06T03:47:34.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11075 State: PUBLISHED Published: 2020-06-19T19:27:18 Last Updated: 2024-08-06T03:47:34.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.0. It allows attackers to obtain sensitive information about team URLs via an API. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11076 State: PUBLISHED Published: 2020-06-19T19:27:37 Last Updated: 2024-08-06T03:47:35.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.0. It does not ensure that a cookie is used over SSL. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11077 State: PUBLISHED Published: 2020-06-19T19:28:01 Last Updated: 2024-08-06T03:47:34.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11078 State: PUBLISHED Published: 2020-06-19T19:28:22 Last Updated: 2024-08-06T03:47:34.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11079 State: PUBLISHED Published: 2020-06-19T19:28:42 Last Updated: 2024-08-06T03:47:34.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11080 State: PUBLISHED Published: 2020-06-19T19:28:59 Last Updated: 2024-08-06T03:47:34.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11081 State: PUBLISHED Published: 2020-06-19T19:29:13 Last Updated: 2024-08-06T03:47:34.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 2.2.0. It allows unintended access to information stored by a web browser. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11082 State: PUBLISHED Published: 2020-06-19T19:29:32 Last Updated: 2024-08-06T03:47:34.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 2.2.0. It allows XSS via a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11083 State: PUBLISHED Published: 2020-06-19T19:29:43 Last Updated: 2024-08-06T03:47:34.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 2.2.0. It allows XSS because it configures files to be opened in a browser window. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2016-11084 State: PUBLISHED Published: 2020-06-19T19:30:10 Last Updated: 2024-08-06T03:47:34.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 2.1.0. It allows XSS via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/