Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- https://access.redhat.com/errata/RHSA-2016:1347 - http://rhn.redhat.com/errata/RHSA-2016-2035.html - https://access.redhat.com/errata/RHSA-2016:1389 - https://access.redhat.com/errata/RHSA-2016:1345 - https://access.redhat.com/errata/RHSA-2016:1376 - https://rhn.redhat.com/errata/RHSA-2016-1330.html - http://rhn.redhat.com/errata/RHSA-2016-1439.html - https://rhn.redhat.com/errata/RHSA-2016-1331.html - http://www.securityfocus.com/bid/91481 - https://access.redhat.com/errata/RHSA-2016:1434 - https://rhn.redhat.com/errata/RHSA-2016-1328.html - https://access.redhat.com/errata/RHSA-2016:1433 - https://issues.jboss.org/browse/JGRP-2021 - https://access.redhat.com/errata/RHSA-2016:1374 - http
rata/RHSA-2016:1433 - https://issues.jboss.org/browse/JGRP-2021 - https://access.redhat.com/errata/RHSA-2016:1374 - https://access.redhat.com/errata/RHSA-2016:1432 - https://access.redhat.com/errata/RHSA-2016:1346 - https://rhn.redhat.com/errata/RHSA-2016-1334.html - https://rhn.redhat.com/errata/RHSA-2016-1333.html - https://rhn.redhat.com/errata/RHSA-2016-1329.html - https://rhn.redhat.com/errata/RHSA-2016-1332.html - http://rhn.redhat.com/errata/RHSA-2016-1435.html - http://www.securitytracker.com/id/1036165 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://lists.apache.org/thread.html/ra18cac97416abc2958db0b107877c31da28d884fa6e70fd89c87384a%40%3Cde
19-5072813.html - https://lists.apache.org/thread.html/ra18cac97416abc2958db0b107877c31da28d884fa6e70fd89c87384a%40%3Cdev.geode.apache.org%3E - https://lists.apache.org/thread.html/rb37cc937d4fc026fb56de4b4ec0d054aa4083c1a4edd0d8360c068a0%40%3Cdev.geode.apache.org%3E
CVE ID: CVE-2016-2142 State: PUBLISHED Published: 2016-06-08T17:00:00 Last Updated: 2024-08-05T23:17:50.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1038
CVE ID: CVE-2016-2143 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:17:50.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://git.kernel.org/cgit/linux/kernel/git/torv
//lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3446c13b268af86391d06611327006b059b8bab1 - http://rhn.redhat.com/errata/RHSA-2016-2766.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://github.com/torvalds/linux/commit/3446c13b268af86391d06611327006b059b8bab1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - https://security-tracker.debian.org/tracker/CVE-2016-2143 - http://www.debian.org/security/2016/dsa-3607 - http://rhn.redhat.com/errata/RHSA-2016-1539.html - http://lists.opensuse.org/opensuse-security-announce/20
16/dsa-3607 - http://rhn.redhat.com/errata/RHSA-2016-1539.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
CVE ID: CVE-2016-2144 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2016-2145 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T23:17:50.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote attackers to cause a denial of service (segmentation fault and process crash) via a crafted POST data. Additional Analyst Notes: - CVE Program Container: References: - https://sympa.uninett.no/lists/uninett.no/arc/modmellon/2016-03/msg00000.html - https://github.com/UNINETT/mod_auth_mellon/pull/71 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179085.ht
hub.com/UNINETT/mod_auth_mellon/pull/71 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179085.html
CVE ID: CVE-2016-2146 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T23:17:50.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cause a denial of service (worker process crash, web server deadlock, or memory consumption) via a large amount of POST data. Additional Analyst Notes: - CVE Program Container: References: - https://sympa.uninett.no/lists/uninett.no/arc/modmellon/2016-03/msg00000.html - https://github.com/UNINETT/mod_auth_mellon/pull/71 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/17
s://github.com/UNINETT/mod_auth_mellon/pull/71 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179085.html
CVE ID: CVE-2016-2147 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T23:17:50.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write. Additional Analyst Notes: - CVE Program Container: References: - https://git.busybox.net/busybox/commit/?id=d474ffc68290e0a83651c4432eeabfa62cd51e87 - http://www.openwall.com/lists/oss-security/2016/03/11/16 - https://security.gentoo.org/glsa/201612-04 - https://lists.debian.org/debian-lts-announce/2018/07/msg0
y/2016/03/11/16 - https://security.gentoo.org/glsa/201612-04 - https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html - https://busybox.net/news.html - https://usn.ubuntu.com/3935-1/ - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html - http://seclists.org/fulldisclosure/2020/Aug/20 - https://lists.debian.org/debian-lts-an
entials-GNU-glibc-BusyBox.html - http://seclists.org/fulldisclosure/2020/Aug/20 - https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html
CVE ID: CVE-2016-2148 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-05T23:17:50.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing. Additional Analyst Notes: - CVE Program Container: References: - https://git.busybox.net/busybox/commit/?id=352f79acbd759c14399e39baef21fc4ffe180ac2 - http://www.openwall.com/lists/oss-security/2016/03/11/16 - https://security.gentoo.org/glsa/201612-04 - https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html - https://busybox.net/news.html - htt
lsa/201612-04 - https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html - https://busybox.net/news.html - https://usn.ubuntu.com/3935-1/ - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html - http://seclists.org/fulldisclosure/2020/Aug/20 - https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html
CVE ID: CVE-2016-2149 State: PUBLISHED Published: 2016-06-08T17:00:00 Last Updated: 2024-08-05T23:17:50.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1064
CVE ID: CVE-2016-2150 State: PUBLISHED Published: 2016-06-09T16:00:00 Last Updated: 2024-08-05T23:17:50.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201606-05 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html - http://www.ubuntu.com/usn/USN-3014-1 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html
msg00003.html - http://www.ubuntu.com/usn/USN-3014-1 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html - https://access.redhat.com/errata/RHSA-2016:1205 - https://bugzilla.redhat.com/show_bug.cgi?id=1313496 - http://www.debian.org/security/2016/dsa-3596 - https://access.redhat.com/errata/RHSA-2016:1204
CVE ID: CVE-2016-2151 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: user/index.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 grants excessive authorization on the basis of the moodle/course:viewhiddenuserfields capability, which allows remote authenticated users to discover student e-mail addresses by leveraging the teacher role and reading a Participants list. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=sear
er: References: - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52433 - http://www.securitytracker.com/id/1035333 - https://moodle.org/mod/forum/discuss.php?d=330173
CVE ID: CVE-2016-2152 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an external DB profile field. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705 - http://www.openwall.com/lists/oss-security/2016/03/21/1 - https://moodle.org/mod/forum/discuss.php?d=330174 -
L-50705 - http://www.openwall.com/lists/oss-security/2016/03/21/1 - https://moodle.org/mod/forum/discuss.php?d=330174 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2153 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the advanced-search feature in mod_data in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted field in a URL, as demonstrated by a search form field. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727 - http://www.openwall.com/lists/oss-security/2016/03/21/1 - htt
rg/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727 - http://www.openwall.com/lists/oss-security/2016/03/21/1 - https://moodle.org/mod/forum/discuss.php?d=330175 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2154 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course names by subscribing to a rule. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51167 - https://moodle.org/mod/forum/discuss.php?d=330176
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51167 - https://moodle.org/mod/forum/discuss.php?d=330176 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2155 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grade-reporting feature in Singleview (aka Single View) in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/grade:manage capability, which allows remote authenticated users to modify "Exclude grade" settings by leveraging the Non-Editing Instructor role. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=330177 - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&
php?d=330177 - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52378 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2156 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 provides calendar-event data without considering whether an activity is hidden, which allows remote authenticated users to obtain sensitive information via a web-service request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52808 - https://moodle.o
s-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52808 - https://moodle.org/mod/forum/discuss.php?d=330178 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2157 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage Assignment plugins. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53031 - https://moodle.org/
ecurity/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53031 - https://moodle.org/mod/forum/discuss.php?d=330179 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2158 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature is enabled, allows remote attackers to obtain sensitive category-detail information from the navigation branch by leveraging the guest role for an Ajax request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/21/1 - https://moodle.org/mod/forum/discuss.php?d=330180 - http://git.moodle.org/gw?p=moo
com/lists/oss-security/2016/03/21/1 - https://moodle.org/mod/forum/discuss.php?d=330180 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52774 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2159 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:17:50.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The save_submission function in mod/assign/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote authenticated users to bypass intended due-date restrictions by leveraging the student role for a web-service request. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=330182 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901 - http://www.openwall.com/lists/oss-
30182 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901 - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2160 State: PUBLISHED Published: 2016-06-08T17:00:00 Last Updated: 2024-08-05T23:17:50.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openshift/origin/pull/7864 - https://access.redhat.com/errata/RHSA-2016:1064 - https://bugzilla.redhat.com/show_bug.cgi?id=1316127
CVE ID: CVE-2016-2161 State: PUBLISHED Published: 2017-07-27T21:00:00Z Last Updated: 2024-09-16T22:02:00.808Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-823 Description: In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208221 - http://www.securityfocus.com/bid/95076 - http://www.debian.org/security/2017/dsa-3796 - http://www.securitytracker.com/id/1037508 - https://access.redhat.com/errata/RHSA-2017:1413 - https://access.r
sa-3796 - http://www.securitytracker.com/id/1037508 - https://access.redhat.com/errata/RHSA-2017:1413 - https://access.redhat.com/errata/RHSA-2017:1161 - https://www.tenable.com/security/tns-2017-04 - https://access.redhat.com/errata/RHSA-2017:1414 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us - https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-2161 - http://rhn.redhat.com/errata/RHSA-2017-1415.html - https://access.redhat.com/errata/RHSA-2017:0906 - https://security.gentoo.org/glsa/201701-36 - https://security.netapp.com/advisory/ntap-20180423-0001/ - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd
security.netapp.com/advisory/ntap-20180423-0001/ - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.
read.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40
.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2016-2162 State: PUBLISHED Published: 2016-04-12T16:00:00 Last Updated: 2024-08-05T23:17:50.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors involving language display. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035272 - http://www.securityfocus.com/bid/85070 - http://struts.apache.org/docs/s2-030.html
CVE ID: CVE-2016-2163 State: PUBLISHED Published: 2016-04-11T14:00:00 Last Updated: 2024-08-05T23:17:50.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event. Additional Analyst Notes: - CVE Program Container: References: - https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG - http://packetstormsecurity.com/files/136433/Apache-OpenMeetings-3.0.7-Cross-Site-Scripting.html - http://openmeetings.apache.org/security.html - http://www.securityfocus.com/archive/1/537888/100/0/threaded
CVE ID: CVE-2016-2164 State: PUBLISHED Published: 2016-04-11T14:00:00 Last Updated: 2024-08-05T23:17:50.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136434/Apache-OpenMeetings-3.0.7-Arbitary-File-Read.html - https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG - http://www.s
che-OpenMeetings-3.0.7-Arbitary-File-Read.html - https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG - http://www.securityfocus.com/archive/1/537887/100/0/threaded - http://openmeetings.apache.org/security.html