Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
curityfocus.com/bid/93633 - http://www.securitytracker.com/id/1037049 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CVE ID: CVE-2016-5622 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:16:09.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1037049 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93666
CVE ID: CVE-2016-5623 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T20:03:08.391Z Vendors: Oracle Products: FLEXCUBE Private Banking Problem Types: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Description: Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of
Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Private Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Private Banking accessible data. CVSS v3.0 Base Score 5.4 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95476 - http://www.securitytracker.com/id/1037636 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2016-5624 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:15:59.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2016-2131.html - https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93635 - http://rhn.redhat.com/errata/RHSA-2016-2130.html - http://rhn.
6-2881722.html - http://www.securityfocus.com/bid/93635 - http://rhn.redhat.com/errata/RHSA-2016-2130.html - http://rhn.redhat.com/errata/RHSA-2016-2927.html - http://rhn.redhat.com/errata/RHSA-2016-2595.html - https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/ - http://www.securitytracker.com/id/1037050 - http://rhn.redhat.com/errata/RHSA-2016-2928.html - https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
CVE ID: CVE-2016-5625 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:15:51.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037050 - http://www.securityfocus.com/bid/93617
CVE ID: CVE-2016-5626 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:15:41.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2016-2749.html - http://rhn.redhat.com/errata/RHSA-2016-2131.html - https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/ - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/securit
adb/mariadb-5552-release-notes/ - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2016-2130.html - http://rhn.redhat.com/errata/RHSA-2016-2927.html - http://www.securityfocus.com/bid/93638 - http://rhn.redhat.com/errata/RHSA-2016-2595.html - https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/ - http://www.securitytracker.com/id/1037050 - http://rhn.redhat.com/errata/RHSA-2016-2928.html - https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
CVE ID: CVE-2016-5627 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:15:33.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to Server: InnoDB. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2016-1601.html - http://www.securityfocus.com/bid/93642 - http://www.securitytracker.com/id/1037050
CVE ID: CVE-2016-5628 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:15:24.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: DML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93662 - http://www.securitytracker.com/id/1037050
CVE ID: CVE-2016-5629 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:15:10.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2016-2749.html - http://rhn.redhat.com/errata/RHSA-2016-2131.html - http://www.securityfocus.com/bid/93668 - https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/ - https://security.gentoo.org/glsa/201
cus.com/bid/93668 - https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/ - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2016-2130.html - http://rhn.redhat.com/errata/RHSA-2016-2927.html - http://rhn.redhat.com/errata/RHSA-2016-2595.html - https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/ - http://www.securitytracker.com/id/1037050 - http://rhn.redhat.com/errata/RHSA-2016-2928.html - https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
CVE ID: CVE-2016-5630 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:14:53.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/93674 - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2016-1601.html - http://rhn.redhat.com/errata/RHSA-2016-2927.html - h
6-2881722.html - http://rhn.redhat.com/errata/RHSA-2016-1601.html - http://rhn.redhat.com/errata/RHSA-2016-2927.html - http://www.securitytracker.com/id/1037050
CVE ID: CVE-2016-5631 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:14:41.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-01 - http://www.securityfocus.com/bid/93684 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037050
CVE ID: CVE-2016-5632 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:14:33.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93693 - http://www.securitytracker.com/id/1037050
CVE ID: CVE-2016-5633 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:13:20.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-8290. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93702 - http://www.securitytracker.com/id/1037050
CVE ID: CVE-2016-5634 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:12:56.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to RBR. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/bid/93709 - http://www.securitytracker.com/id/1037050
CVE ID: CVE-2016-5635 State: PUBLISHED Published: 2016-10-25T14:00:00 Last Updated: 2024-10-10T18:12:48.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Security: Audit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-01 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037050 - http://www.securityfocus.com/bid/93715
CVE ID: CVE-2016-5636 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T01:07:59.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAPUE - http://www.openwall.com/lists/oss-security/2016/06/16/1 - http://www.splunk.com/view/SP-CAAAPSV - https://lists.debian.org/debian-lts-announce/2019/02/msg00011.ht
/2016/06/16/1 - http://www.splunk.com/view/SP-CAAAPSV - https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html - https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://bugs.python.org/issue26171 - https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS - http://www.securitytracker.com/id/1038138 - http://www.securityfocus.com/bid/91247 - https://security.gentoo.org/glsa/201701-18 - https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2 - http://www.openwall.com/lists/oss-security/2016/06/15/15 - http://rhn.redhat.com/errata/RHSA-2016-2586.html - http://lists.opensuse.or
nwall.com/lists/oss-security/2016/06/15/15 - http://rhn.redhat.com/errata/RHSA-2016-2586.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2016-5637 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-06T01:07:58.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image, related to a "type confusion" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/123799 - http://www.securityfocus.com/bid/91726
CVE ID: CVE-2016-5638 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-06T01:07:59.943Z Vendors: Netgear Products: WNDR4500 Problem Types: CWE-319 Description: There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genie_ping.htm or genie_ping2.htm or genie_ping3.htm page without authentication. Once accessed, the page will be redirected to the aCongratulations2.htma page, which reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Networ
tions2.htma page, which reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/140342/Netgear-DGN2200-DGND3700-WNDR4500-Information-Disclosure.html
CVE ID: CVE-2016-5639 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T01:08:00.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2016-05-001.md - https://www.exploit-db.com/exploits/40813/ - http://www.securityfocus.com/bid/92216 - http://www.kb.cert.org/vuls/id/603047
CVE ID: CVE-2016-5640 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T01:07:58.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2016-05-002.md - http://www.securityfocus.com/bid/92216 - http://www.kb.cert.org/vuls/id/603047
CVE ID: CVE-2016-5642 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T01:07:59.831Z Vendors: n/a Products: Opmantek NMIS before 8.5.12G Problem Types: XSS Description: Opmantek NMIS before 8.5.12G has XSS via SNMP. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/community/infosec/blog/2016/09/07/multiple-disclosures-for-multiple-network-management-systems-part-2
CVE ID: CVE-2016-5645 State: PUBLISHED Published: 2016-08-24T01:00:00 Last Updated: 2024-08-06T01:08:00.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92428 - https://ics-cert.us-cert.gov/advisories/ICSA-16-224-01
CVE ID: CVE-2016-5646 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T01:08:00.403Z Vendors: Lexmark Products: Perceptive Document Filters Problem Types: heap buffer overflow Description: An exploitable heap overflow vulnerability exists in the Compound Binary File Format (CBFF) parser functionality of Lexmark Perceptive Document Filters library. A specially crafted CBFF file can cause a code execution. An attacker can send a malformed file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0185/
CVE ID: CVE-2016-5647 State: PUBLISHED Published: 2016-12-13T18:00:00 Last Updated: 2024-08-06T01:07:59.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: The igdkmd64 module in the Intel Graphics Driver through 15.33.42.435, 15.36.x through 15.36.30.4385, and 15.40.x through 15.40.4404 on Windows allows local users to cause a denial of service (crash) or gain privileges via a crafted D3DKMTEscape request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91708 - http://www.talosintelligence.com/reports/TALOS-2016-0087/ - https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00054&languageid=en-fr - https://support.lenov
-0087/ - https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00054&languageid=en-fr - https://support.lenovo.com/us/en/product_security/ps500068
CVE ID: CVE-2016-5648 State: PUBLISHED Published: 2017-06-08T20:00:00 Last Updated: 2024-08-06T01:07:59.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/538851/100/0/threaded - http://seclists.org/fulldisclosure/2016/Jul/17 - http://packetstormsecurity.com/files/137775/Acer-Portal-Android-Application-3.9.3.2006-Man-In-The-Middle.html - https://www.kb.cert.org/vuls/id/690343
CVE ID: CVE-2016-5649 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-06T01:08:00.436Z Vendors: Netgear Products: DGN2200, DGND3700 Problem Types: CWE-319 Description: A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text before it gets redirected to absw_vfysucc.cgia. An attacker can use this password to gain administrator access to the targeted router's web interface. Additional Analyst Notes: - CVE Program Container: Reference
dministrator access to the targeted router's web interface. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/140342/Netgear-DGN2200-DGND3700-WNDR4500-Information-Disclosure.html - http://packetstormsecurity.com/files/152675/Netgear-DGN2200-DGND3700-Admin-Password-Disclosure.html
CVE ID: CVE-2016-5650 State: PUBLISHED Published: 2016-08-24T01:00:00 Last Updated: 2024-08-06T01:07:59.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92449 - http://www.kb.cert.org/vuls/id/301735
CVE ID: CVE-2016-5652 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T01:07:59.890Z Vendors: LibTiff Products: LibTiff Problem Types: heap buffer overflow Description: An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-16 - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.debian.org/security/2017/dsa-3762 - http://www.
01701-16 - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.debian.org/security/2017/dsa-3762 - http://www.talosintelligence.com/reports/TALOS-2016-0187/ - http://www.securityfocus.com/bid/93902
CVE ID: CVE-2016-5653 State: PUBLISHED Published: 2016-07-19T22:00:00 Last Updated: 2024-08-06T01:07:59.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/682704 - http://www.securityfocus.com/bid/92035
CVE ID: CVE-2016-5654 State: PUBLISHED Published: 2016-07-19T22:00:00 Last Updated: 2024-08-06T01:07:59.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/682704 - http://www.securityfocus.com/bid/92035
CVE ID: CVE-2016-5655 State: PUBLISHED Published: 2016-07-19T22:00:00 Last Updated: 2024-08-06T01:07:59.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/682704 - http://www.securityfocus.com/bid/92035
CVE ID: CVE-2016-5660 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-06T01:07:59.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/665280 - http://www.securityfocus.com/bid/91765 - http://www.kb.cert.org/vuls/id/JLAD-ABMPVA