Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10365 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-06T03:21:50.818Z Vendors: Elastic Products: Kibana Problem Types: CWE-601 Description: Kibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an attacker to craft a link in the Kibana domain that redirects to an arbitrary website. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security
CVE ID: CVE-2016-10366 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-06T03:21:50.860Z Vendors: Elastic Products: Kibana Problem Types: CWE-79 Description: Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security
CVE ID: CVE-2016-10367 State: PUBLISHED Published: 2017-05-03T10:00:00Z Last Updated: 2024-09-16T19:19:27.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding bypass, %252f instead of /. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341
CVE ID: CVE-2016-10368 State: PUBLISHED Published: 2017-05-03T10:00:00Z Last Updated: 2024-09-16T17:24:09.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the /login URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-016/?fid=8341
CVE ID: CVE-2016-10369 State: PUBLISHED Published: 2017-05-08T18:00:00Z Last Updated: 2024-09-16T19:47:02.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control). Additional Analyst Notes: - CVE Program Container: References: - https://git.lxde.org/gitweb/?p=lxde/lxterminal.git%3Ba=commit%3Bh=f99163c6ff8b2f57c5f37b1ce5d62cf7450d4648 - https://unix.stackexchange.com/questions/333539/lxterminal-in-the-netstat-output/333578 - https://bugs.debian.org/862098
CVE ID: CVE-2016-10370 State: PUBLISHED Published: 2017-05-11T18:00:00 Last Updated: 2024-08-06T03:21:51.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on OnePlus devices such as the 3T. The OnePlus OTA Updater pushes the signed-OTA image over HTTP without TLS. While it does not allow for installation of arbitrary OTAs (due to the digital signature), it unnecessarily increases the attack surface, and allows for remote exploitation of other vulnerabilities such as CVE-2017-5948, CVE-2017-8850, and CVE-2017-8851. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98495 - https://alephsecurity.com/vulns/alep
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/98495 - https://alephsecurity.com/vulns/aleph-2017022 - https://forums.oneplus.net/threads/ota-and-imei-over-http.453992/
CVE ID: CVE-2016-10371 State: PUBLISHED Published: 2017-05-10T05:14:00 Last Updated: 2024-08-06T03:21:51.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2612 - https://usn.ubuntu.com/3602-1/ - http://bugzilla.maptools.org/show_bug.cgi?id=2535
CVE ID: CVE-2016-10372 State: PUBLISHED Published: 2017-05-16T14:00:00 Last Updated: 2024-08-06T03:21:50.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature. Additional Analyst Notes: - CVE Program Container: References: - https://devicereversing.wordpress.com/2016/11/07/eirs-d1000-modem-is-wide-open-to-being-hacked/ - https://isc.sans.edu/forums/diary/TR069+NewNTPServer+Exploits
016/11/07/eirs-d1000-modem-is-wide-open-to-being-hacked/ - https://isc.sans.edu/forums/diary/TR069+NewNTPServer+Exploits+What+we+know+so+far/21763/ - https://ghostbin.com/paste/q2vq2
CVE ID: CVE-2016-10373 State: REJECTED Published: 2017-05-31T14:00:00 Last Updated: 2017-05-31T12:57:01 Description: No description available.
CVE ID: CVE-2016-10374 State: PUBLISHED Published: 2017-05-17T19:00:00Z Last Updated: 2024-09-17T02:27:13.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as demonstrated by creating a perltidy.ERR symlink that the victim cannot delete. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/862667
CVE ID: CVE-2016-10375 State: PUBLISHED Published: 2017-05-26T17:00:00 Last Updated: 2024-08-06T03:21:51.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fbb-git/yodl/commit/fd85f8c94182558ff1480d06a236d6fb927979a3 - https://github.com/fbb-git/yodl/issues/1 - https://lists.debian.org/debian-lts-announce/2020/04/msg00026.html
CVE ID: CVE-2016-10376 State: PUBLISHED Published: 2017-05-28T00:00:00 Last Updated: 2024-08-06T03:21:51.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions. Additional Analyst Notes: - CVE Program Container: References: - https://dev.gajim.org/gajim/gajim/commit/cb65cfc5aed9efe05208ebbb7fb2d41fcf7253cc - https://mail.jabber.org/pipermail/standards/2016-August/031335.html - https://security.gentoo.org/glsa/201707-14 - http://www.debian.org/security/2017/dsa-3943 - https://d
gust/031335.html - https://security.gentoo.org/glsa/201707-14 - http://www.debian.org/security/2017/dsa-3943 - https://dev.gajim.org/gajim/gajim/issues/8378 - https://bugs.debian.org/863445
CVE ID: CVE-2016-10377 State: PUBLISHED Published: 2017-05-29T03:52:00Z Last Updated: 2024-09-16T18:39:28.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch. Additional Analyst Notes: - CVE Program Container: References: - https://mail.openvswitch.org/pipermail/ovs-dev/2016-July/319503.html
CVE ID: CVE-2016-10378 State: PUBLISHED Published: 2017-05-29T19:00:00Z Last Updated: 2024-09-16T16:58:53.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2016/09/sql-injection-in-latest-e107-cms.html
CVE ID: CVE-2016-10379 State: PUBLISHED Published: 2017-05-29T19:00:00 Last Updated: 2024-08-06T03:21:50.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VirtueMart com_virtuemart component 3.0.14 for Joomla! allows SQL injection by remote authenticated administrators via the virtuemart_paymentmethod_id or virtuemart_shipmentmethod_id parameter to administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98753 - http://code610.blogspot.com/2016/08/testing-sql-injections-in-comvirtuemart.html
CVE ID: CVE-2016-10380 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T18:04:04.361Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Information Exposure in LTE Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10381 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T20:51:51.355Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Information Exposure in LTE Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10382 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T19:14:45.630Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Access Control in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-10383 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T18:38:22.005Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-10384 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T23:31:43.408Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Reachable Assertion in WLAN Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10385 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T22:50:47.578Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Use-After-Free in IMS Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10386 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T04:29:20.509Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Validation of Array Index in GNSS Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10387 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T22:14:07.113Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Reachable Assertion in LTE Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10388 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T20:46:56.530Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Configuration Vulnerability in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-10389 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T03:32:28.461Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in LK Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99465
CVE ID: CVE-2016-10390 State: PUBLISHED Published: 2017-08-18T18:00:00 Last Updated: 2024-08-06T03:21:51.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may be consumed. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10391 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T00:01:59.346Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Reachable Assertion in Bluetooth Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-10392 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T03:22:44.849Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Information Exposure in Core Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10393 State: PUBLISHED Published: 2018-03-15T21:00:00 Last Updated: 2024-08-06T03:21:51.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with large size values, integer arithmetic overflows, and allocated buffer size will be less than intended buffer size. The following buffer operations will overflow the allocated buffer. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-03-01 - http://www.securityfocus.com/bid/103292
CVE ID: CVE-2016-10394 State: PUBLISHED Published: 2024-11-26T08:55:13.368Z Last Updated: 2024-11-26T14:09:23.845Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-287 Description: Initial xbl_sec revision does not have all the debug policy features and critical checks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html
CVE ID: CVE-2016-10395 State: PUBLISHED Published: 2017-06-15T16:00:00 Last Updated: 2024-08-06T03:21:51.436Z Vendors: Flexera Software LLC Products: FlexNet Publisher Problem Types: Out-of-bounds memory read access leading to local user privilege escalation Description: In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.f
code with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/advisories/76368/ - https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager - https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/ - https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/ - https://www.schneider-electric.com/en/download/document/SEVD-2018-046-01/ - https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01
CVE ID: CVE-2016-10396 State: PUBLISHED Published: 2017-07-06T01:00:00Z Last Updated: 2024-09-16T19:10:23.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a particular order such that the worst-case computational complexity is realized in the algorithm utilized to determine if reassembly of the fragments can take place. Additional Analyst Notes: - CVE Program Container: References: -
termine if reassembly of the fragments can take place. Additional Analyst Notes: - CVE Program Container: References: - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/isakmp_frag.c.diff?r1=1.5&r2=1.5.36.1 - https://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=51682 - http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/isakmp_frag.c?only_with_tag=MAIN
CVE ID: CVE-2016-10397 State: PUBLISHED Published: 2017-07-10T14:00:00 Last Updated: 2024-08-06T03:21:50.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:80?@good.example.com/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c). Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2017/07/10/6 - http://php.net/ChangeLog-5.php - h
rogram Container: References: - http://openwall.com/lists/oss-security/2017/07/10/6 - http://php.net/ChangeLog-5.php - https://security.netapp.com/advisory/ntap-20180112-0001/ - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b061fa909de77085d3822a89ab901b934d0362c4 - http://www.securityfocus.com/bid/99552 - http://php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=73192
CVE ID: CVE-2016-10398 State: PUBLISHED Published: 2017-07-14T17:00:00 Last Updated: 2024-08-06T03:21:51.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens (AuthTokens) used by the Trusted Execution Environment (TEE) are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE without authenticating. All apps using authentication-gated cryptography are vulnerable to this attack, which was confirmed on the LG Nexus 5X. Additional Analyst Notes: - CVE Program Container: References: - https://homepages.staff.
confirmed on the LG Nexus 5X. Additional Analyst Notes: - CVE Program Container: References: - https://homepages.staff.os3.nl/~delaat/rp/2015-2016/p30/report.pdf
CVE ID: CVE-2016-10399 State: PUBLISHED Published: 2017-07-27T18:00:00 Last Updated: 2024-08-06T03:21:50.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://sendio.com/support/software-release-history/
CVE ID: CVE-2016-10400 State: PUBLISHED Published: 2017-07-22T17:00:00Z Last Updated: 2024-09-16T20:58:58.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/_core/courses/users/create_course.php. The attacker can read an arbitrary file by visiting get_course_icon.php?id= after the traversal attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23297 - https://github.com/atutor/ATutor/releases/tag/atutor_2_2_2
CVE ID: CVE-2016-10401 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T03:21:50.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists within an ISP's deployment of these devices). Additional Analyst Notes: - CVE Program Container: References: - https://forum.openwrt.org/viewtopic.php?id=62266 - https://www.exploit-db.com/exploits/43105/
CVE ID: CVE-2016-10402 State: PUBLISHED Published: 2017-07-27T14:00:00 Last Updated: 2024-08-06T03:21:50.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84841 - https://bugs.chromium.org/p/project-zero/issues/detail?id=765