Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
R0.65135. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037652 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-asr - http://www.securityfocus.com/bid/95629
CVE ID: CVE-2016-9217 State: PUBLISHED Published: 2016-12-26T07:55:00 Last Updated: 2024-08-06T02:42:11.280Z Vendors: n/a Products: Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers 7.3(0)ZN(0.99) Problem Types: unspecified Description: A vulnerability in Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers could allow an unauthenticated, remote attacker to connect to the database used by these products. More Information: CSCus99394. Known Affected Releases: 7.3(0)ZN(0.99). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95023 - https://tools.cisco.com/security/center/content/CiscoSecurit
ner: References: - http://www.securityfocus.com/bid/95023 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-icf
CVE ID: CVE-2016-9218 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-06T02:42:11.281Z Vendors: n/a Products: Cisco Hybrid Meeting Server 1.0 Problem Types: unspecified Description: A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the web interface. More Information: CSCvc28662. Known Affected Releases: 1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95634 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-hms
CVE ID: CVE-2016-9219 State: PUBLISHED Published: 2017-04-06T18:00:00 Last Updated: 2024-08-06T02:42:11.275Z Vendors: n/a Products: Cisco Wireless LAN Controller Problem Types: CWE-20 Description: A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this vulnerability by sending a crafted IPv6 UDP packet to a specific port on the targeted device. An exploit could allow the attacker to impact the availability of the device as it could unexpectedly reload. This
vice. An exploit could allow the attacker to impact the availability of the device as it could unexpectedly reload. This vulnerability affects Cisco Wireless LAN Controller (WLC) running software version 8.2.121.0 or 8.3.102.0. Cisco Bug IDs: CSCva98592. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc2 - http://www.securityfocus.com/bid/97423 - http://www.securitytracker.com/id/1038183
CVE ID: CVE-2016-9220 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-06T02:42:11.206Z Vendors: n/a Products: Cisco Mobility Express 2800 and 3800 Problem Types: unspecified Description: A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. More Information: CSCvb66659. Known Affected Releases: 8.2(130.0). Known Fixed Releases: 8.2(131.10) 8.2(131.6) 8.2(141.0) 8.3(104.56) 8.4(1.88) 8.4(1.91). Additional Analyst Notes: - CVE Program
xed Releases: 8.2(131.10) 8.2(131.6) 8.2(141.0) 8.3(104.56) 8.4(1.88) 8.4(1.91). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cme1 - http://www.securityfocus.com/bid/95633
CVE ID: CVE-2016-9221 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-06T02:42:11.193Z Vendors: n/a Products: Cisco Mobility Express 2800 Series and 3800 Series Access Points Problem Types: unspecified Description: A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause authentication to fail. Affected Products: This vulnerability affects Cisco Mobility Express 2800 Series and 3800 Series Access Points when configured in local mode in 40 MHz. More Information: CSCvb33575. Known Affected Releases: 8.2(121.12) 8.4(1.82)
ts when configured in local mode in 40 MHz. More Information: CSCvb33575. Known Affected Releases: 8.2(121.12) 8.4(1.82). Known Fixed Releases: 8.2(131.2) 8.2(131.3) 8.2(131.4) 8.2(141.0) 8.3(104.53) 8.3(104.54) 8.4(1.80) 8.4(1.85). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cme2 - http://www.securityfocus.com/bid/95631
CVE ID: CVE-2016-9222 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-06T02:42:11.173Z Vendors: n/a Products: Cisco NetFlow Generation Appliance 1.0(2) Problem Types: unspecified Description: A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvb15229. Known Affected Releases: 1.0(2). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95640 - https://tools.cisco.com/security/center/content/CiscoS
Container: References: - http://www.securityfocus.com/bid/95640 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nga
CVE ID: CVE-2016-9223 State: PUBLISHED Published: 2016-12-26T07:55:00 Last Updated: 2024-08-06T02:42:11.258Z Vendors: n/a Products: Cisco CloudCenter Orchestrator Problem Types: unspecified Description: A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO; formerly CliQr) could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco CloudCenter Orchestrator (CCO) deployments where the Docker Engine TCP port 2375 is open on the system and bound to local address 0.0.0.0 (any interface). Additional Analyst Notes: - CVE Program Contai
is open on the system and bound to local address 0.0.0.0 (any interface). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95024 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-cco
CVE ID: CVE-2016-9224 State: PUBLISHED Published: 2016-12-26T07:55:00 Last Updated: 2024-08-06T02:42:11.272Z Vendors: n/a Products: Cisco Jabber Guest Server 10.6(9) Problem Types: unspecified Description: A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts. More Information: CSCvc31635. Known Affected Releases: 10.6(9). Known Fixed Releases: 11.0(0). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95016 - http://www.securitytracker.com/id/1037516 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-jabber
CVE ID: CVE-2016-9225 State: PUBLISHED Published: 2017-02-01T19:00:00 Last Updated: 2024-08-06T02:42:11.088Z Vendors: n/a Products: all versions of the ASA CX Context-Aware Security module Problem Types: CWE-399 Description: A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security module could allow an unauthenticated, remote attacker to cause the CX module to be unable to process further traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of IP fragments. An attacker could exploit this vulnerability by sending crafted fragmented IP traffic across the CX module. An explo
ts. An attacker could exploit this vulnerability by sending crafted fragmented IP traffic across the CX module. An exploit could allow the attacker to exhaust free packet buffers in shared memory (SHM), causing the CX module to be unable to process further traffic, resulting in a DoS condition. This vulnerability affects all versions of the ASA CX Context-Aware Security module. Cisco has not released and will not release software updates that address this vulnerability. There are no workarounds that address this vulnerability. Cisco Bug IDs: CSCva62946. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95788 - https://tools.cisco.com/security/c
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95788 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-cas - http://www.securitytracker.com/id/1037696
CVE ID: CVE-2016-9226 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9227 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9228 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9229 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9230 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9231 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9232 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9233 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9234 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9235 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9236 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9237 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9238 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9239 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9240 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9241 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9242 State: PUBLISHED Published: 2016-11-07T11:00:00 Last Updated: 2024-08-06T02:42:11.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) content_type or (2) subtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94194 - https://github.com/exponentcms/exponent-cms/commit/6172f67620ac13fc2f4e9d650c61937d48e9ecb9
CVE ID: CVE-2016-9243 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-06T02:42:11.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ/ - http://www.ubuntu.com/usn/USN-3138-1 - https://github.com/pyca/cryptography/commit/b924696b2e8731f39696584d12cceeb3aeb2d874 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
1f39696584d12cceeb3aeb2d874 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT/ - http://www.securityfocus.com/bid/94216 - http://www.openwall.com/lists/oss-security/2016/11/09/2 - https://cryptography.io/en/latest/changelog - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL/ - https://github.com/pyca/cryptography/issues/3211
CVE ID: CVE-2016-9244 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T02:42:11.207Z Vendors: F5 Networks Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, PEM, PSM Problem Types: TLS Session Ticket uninitialized memory leak Description: A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well. Additional Analyst Notes: - CVE Program Con
possible that other data from uninitialized memory may be returned as well. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K05121675 - https://www.exploit-db.com/exploits/41298/ - https://filippo.io/Ticketbleed/ - http://www.securityfocus.com/bid/96143 - https://blog.filippo.io/finding-ticketbleed/ - http://www.securitytracker.com/id/1037800 - http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html - https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py
CVE ID: CVE-2016-9245 State: PUBLISHED Published: 2017-03-07T21:00:00 Last Updated: 2024-08-06T02:42:11.195Z Vendors: F5 Networks Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Problem Types: denial of service Description: In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in iRules and/or BIG-IP LTM policies. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device i
-IP LTM policies. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K22216037 - http://www.securitytracker.com/id/1037964 - http://www.securityfocus.com/bid/96471
CVE ID: CVE-2016-9246 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-9247 State: PUBLISHED Published: 2017-01-10T16:00:00 Last Updated: 2024-08-06T02:42:11.296Z Vendors: F5 Networks Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Problem Types: TCP Analytics vulnerability Description: Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel (TMM) to restart. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/#/article/K33500120 - http://www.securityfocus.com/bid/95405 - http://www.securitytracker.com/id/1037581
CVE ID: CVE-2016-9248 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-9249 State: PUBLISHED Published: 2017-01-31T15:00:00 Last Updated: 2024-08-06T02:42:11.215Z Vendors: F5 Networks Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Problem Types: BIG-IP Virtual Server with TCP Fast Open vulnerability Description: An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95825 - https://support.f5.com/csp/article/K71282001 - http://www.securitytracker.com/id/1037715
CVE ID: CVE-2016-9250 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-06T02:42:11.205Z Vendors: F5 Networks, Inc. Products: BIG-IP Problem Types: Arbitrary File Deletion via Undisclosed Mechanism Description: In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K55792317
CVE ID: CVE-2016-9251 State: PUBLISHED Published: 2017-05-09T15:00:00 Last Updated: 2024-08-06T02:42:11.273Z Vendors: F5 Networks, Inc. Products: BIG-IP Problem Types: Undisclosed privilege escalation in iControl Rest Description: In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K41107914 - http://www.securitytracker.com/id/1038414
CVE ID: CVE-2016-9252 State: PUBLISHED Published: 2017-03-27T18:00:00 Last Updated: 2024-08-06T02:42:11.275Z Vendors: F5 Networks Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WebSafe Problem Types: TMM data-plane Description: The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial-of-service (DoS) through unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K46535047 - http://ww
dditional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K46535047 - http://www.securitytracker.com/id/1038132
CVE ID: CVE-2016-9253 State: PUBLISHED Published: 2017-05-09T15:00:00 Last Updated: 2024-08-06T02:42:11.215Z Vendors: F5 Networks, Inc. Products: BIG-IP Problem Types: Websocket profile vulnerability Description: In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K51351360 - http://www.securitytracker.com/id/1038415
CVE ID: CVE-2016-9254 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-9255 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-9256 State: PUBLISHED Published: 2017-05-09T15:00:00 Last Updated: 2024-08-06T02:42:11.288Z Vendors: F5 Networks, Inc. Products: BIG-IP Problem Types: iControl vulnerability CVE-2016-9256 Description: In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal usage; the typical period in which this is possible is limited to at most a few seconds after the permission change. Additional Analyst Notes: - CVE Program Container: References: - ht
o at most a few seconds after the permission change. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K47284724 - http://www.securityfocus.com/bid/96464
CVE ID: CVE-2016-9257 State: PUBLISHED Published: 2017-05-09T15:00:00 Last Updated: 2024-08-06T02:42:11.282Z Vendors: F5 Networks, Inc. Products: BIG-IP APM Problem Types: Non-authenticated XSS attack against Administrative interface via public interface Description: In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to carry out a Cross Site Scripting (XSS) attack against the Administrative user. Additional Analyst Notes: - CVE Program Container: Refer
ss Site Scripting (XSS) attack against the Administrative user. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K43523962 - http://www.securitytracker.com/id/1038416
CVE ID: CVE-2016-9258 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-9259 State: PUBLISHED Published: 2017-02-28T18:00:00 Last Updated: 2024-08-06T02:42:11.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-17 - http://www.securitytracker.com/id/1037293
CVE ID: CVE-2016-9260 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:42:11.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to handling of .nessus files. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN12796388/index.html - http://www.securityfocus.com/bid/95772 - https://www.tenable.com/security/tns-2016-16 - http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000013.html
CVE ID: CVE-2016-9261 State: PUBLISHED Published: 2017-02-28T18:00:00 Last Updated: 2024-08-06T02:42:11.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tenable Log Correlation Engine (aka LCE) before 4.8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-18
CVE ID: CVE-2016-9262 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:42:11.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/10/4 - https://security.gentoo.org/glsa/201707-07 - http://www.securityfocus.com/bid/94224 - https://bugzilla.redhat.com/show_bug.cgi?id=1393