Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5802 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.787Z Vendors: n/a Products: Delta Electronics WPLSoft, ISPSoft, and PMSoft Problem Types: Delta Electronics WPLSoft, ISPSoft, and PMSoft out-of-bounds write Description: An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to 2.10.10. Multiple instances of out-of-bounds write conditions may allow malicious files to be read and executed by the affected software. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-348-03 - http://www.securit
otes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-348-03 - http://www.securityfocus.com/bid/94887
CVE ID: CVE-2016-5803 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.790Z Vendors: n/a Products: CA Unified Infrastructure Management 8.47 and earlier Problem Types: CA Unified Infrastructure Management Directory Traversal Vulnerability Description: An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. Additional Analyst Notes: - CVE Program Container: References:
resolve to a location that is outside of that directory. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-315-01 - http://www.securityfocus.com/bid/94243 - https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20161109-01-security-notice-for-ca-unified-infrastructure-mgmt.html
CVE ID: CVE-2016-5804 State: PUBLISHED Published: 2016-07-15T16:00:00 Last Updated: 2024-08-06T01:15:08.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-196-02 - http://www.securityfocus.com/bid/91777
CVE ID: CVE-2016-5805 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:08.987Z Vendors: n/a Products: Delta Electronics WPLSoft, ISPSoft, and PMSoft Problem Types: Delta Electronics WPLSoft, ISPSoft, and PMSoft heap-based buffer overflows Description: An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to2.10.10. There are multiple instances of heap-based buffer overflows that may allow malicious files to cause the execution of arbitrary code or a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/I
l of service. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-348-03 - http://www.securityfocus.com/bid/94887
CVE ID: CVE-2016-5806 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-5807 State: PUBLISHED Published: 2016-07-15T16:00:00 Last Updated: 2024-08-06T01:15:09.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91728 - https://ics-cert.us-cert.gov/advisories/ICSA-16-194-01
CVE ID: CVE-2016-5808 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-5809 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.763Z Vendors: n/a Products: Schneider Electric IONXXXX Series Problem Types: Schneider Electric IONXXXX Series csrf Description: An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. There is no CSRF Token generated to authenticate the user during a session. Successful exploitation of this vulnerability can allow unauthorized configuration changes to be made and saved. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4464
ade and saved. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44640/ - http://www.securityfocus.com/bid/92916 - https://ics-cert.us-cert.gov/advisories/ICSA-16-308-03
CVE ID: CVE-2016-5810 State: PUBLISHED Published: 2017-05-02T14:00:00 Last Updated: 2024-08-06T01:15:10.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01 - http://www.zerodayinitiative.com/advisories/ZDI-16-429
CVE ID: CVE-2016-5811 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:09.898Z Vendors: n/a Products: Visonic PowerLink2 Problem Types: Visonic PowerLink2 XSS Description: An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. User controlled input is not neutralized prior to being placed in web page output (CROSS-SITE SCRIPTING). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94894 - https://ics-cert.us-cert.gov/advisories/ICSA-16-348-01
CVE ID: CVE-2016-5812 State: PUBLISHED Published: 2016-08-24T01:00:00 Last Updated: 2024-08-06T01:15:10.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 - http://www.securityfocus.com/bid/92605
CVE ID: CVE-2016-5813 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:10.023Z Vendors: n/a Products: Visonic PowerLink2 Problem Types: Visonic PowerLink2 INFORMATION EXPOSURE Description: An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL to an image is accessed, the downloaded image carries with it source code used in the web server (INFORMATION EXPOSURE). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94894 - https://ics-cert.us-cert.gov/advisories/ICSA-16-348-01
CVE ID: CVE-2016-5814 State: PUBLISHED Published: 2016-09-19T01:00:00 Last Updated: 2024-08-06T01:15:09.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remote attackers to execute arbitrary code via a crafted RSS project file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-224-02 - http://www.securityfocus.com/bid/92983
CVE ID: CVE-2016-5815 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:09.863Z Vendors: n/a Products: Schneider Electric IONXXXX Series Power Meter Vulnerabilities Problem Types: Schneider Electric IONXXXX Series Power Meter Vulnerabilities Description: An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. No authentication is configured by default. An unauthorized user can access the device management portal and make configuration changes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94091 -
tion changes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94091 - https://ics-cert.us-cert.gov/advisories/ICSA-16-308-03
CVE ID: CVE-2016-5816 State: PUBLISHED Published: 2017-08-25T16:00:00 Last Updated: 2024-08-06T01:15:10.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded private cryptographic keys that may allow an attacker to decrypt traffic from any other source. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01
CVE ID: CVE-2016-5817 State: PUBLISHED Published: 2016-08-22T10:00:00 Last Updated: 2024-08-06T01:15:10.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-231-01
CVE ID: CVE-2016-5818 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T01:15:08.993Z Vendors: n/a Products: Schneider Electric PowerLogic 2.651 and older Problem Types: Schneider Electric PowerLogic PM8ECC Hard-coded Password Vulnerability Description: An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-292-01 - http://www.securityfocus.com/bid/93602
CVE ID: CVE-2016-5819 State: PUBLISHED Published: 2019-03-21T13:23:04 Last Updated: 2024-08-06T01:15:10.044Z Vendors: Moxa Products: OnCell G3100V2 Series, OnCell G3111/G3151/G3211/G3251 Series Problem Types: CWE-79 Description: Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01
CVE ID: CVE-2016-5820 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-5821 State: PUBLISHED Published: 2016-07-13T15:00:00 Last Updated: 2024-08-06T01:15:10.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse (1) SspiCli.dll or (2) USERENV.dll file or possibly other unspecified DLL files. Additional Analyst Notes: - CVE Program Container: References: - https://labs.bluefrostsecurity.de/advisories/bfs-sa-2016-003/ - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160624-01-hisuite-en -
.de/advisories/bfs-sa-2016-003/ - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160624-01-hisuite-en - http://www.securityfocus.com/archive/1/538797/100/0/threaded - http://packetstormsecurity.com/files/137733/Huawei-HiSuite-For-Windows-4.0.3.301-Privilege-Escalation.html - http://www.securityfocus.com/bid/91418
CVE ID: CVE-2016-5822 State: PUBLISHED Published: 2017-01-27T20:00:00 Last Updated: 2024-08-06T01:15:09.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service (CPU consumption) via a large number of crafted HTTP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95854 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160622-01-oceanstor-en
CVE ID: CVE-2016-5823 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T01:15:09.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/25/4 - https://security.gentoo.org/glsa/201904-02
CVE ID: CVE-2016-5824 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T01:15:08.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libical/libical/issues/235 - https://usn.ubuntu.com/3897-1/ - https://access.redhat.com/errata/RHSA-2019:0269 - https://bugzilla.mozilla.org/show_bug.cgi?id=1275400 - http://www.openwall.com/lists/oss-security/2017/01/20/16 - https://github.com/libical/libical/issues/251 - http://www.securityfocus.com/bid/91459 - http://www.openwall.com/lis
6 - https://github.com/libical/libical/issues/251 - http://www.securityfocus.com/bid/91459 - http://www.openwall.com/lists/oss-security/2016/06/25/4 - https://github.com/libical/libical/issues/286 - https://access.redhat.com/errata/RHSA-2019:0270 - https://security.gentoo.org/glsa/201904-02 - https://security.gentoo.org/glsa/201904-07
CVE ID: CVE-2016-5825 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T01:15:10.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted ics file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1280832 - http://www.securityfocus.com/bid/91459 - http://www.openwall.com/lists/oss-security/2016/06/25/4
CVE ID: CVE-2016-5826 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T01:15:10.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91459 - http://www.openwall.com/lists/oss-security/2016/06/25/4 - https://bugzilla.mozilla.org/show_bug.cgi?id=1281041
CVE ID: CVE-2016-5827 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T01:15:10.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91459 - http://www.openwall.com/lists/oss-security/2016/06/25/4 - https://bugzilla.mozilla.org/show_bug.cgi?id=1281043
CVE ID: CVE-2016-5828 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T01:15:10.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) or possibly have unspecified other impact by starting and suspending a transaction before an exec system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3070-1 - http://www.openwall.com/lists/oss-security/2016/0
rogram Container: References: - http://www.ubuntu.com/usn/USN-3070-1 - http://www.openwall.com/lists/oss-security/2016/06/25/7 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - https://patchwork.ozlabs.org/patch/636776/ - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.com/usn/USN-3070-3 - http://www.ubuntu.com/usn/USN-3070-2 - http://www.ubuntu.com/usn/USN-3071-1 - http://www.debian.org/security/2016/dsa-3616 - http://www.ubuntu.com/usn/USN-3070-4 - http://www.securityfocus.com/bid/91415 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-3071-2 - http://lists.opensuse.org/opensuse-sec
-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-3071-2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-5829 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T01:15:10.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly have unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3070-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html - http://www.oracle.com/technetwork/topics/security/linuxbulle
suse.org/opensuse-security-announce/2016-08/msg00053.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.securityfocus.com/bid/91450 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.com/usn/USN-3070-3 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/c
.org/opensuse-security-announce/2016-08/msg00027.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93a2001bdfd5376c3dc2158653034c20392d15c5 - http://rhn.redhat.com/errata/RHSA-2016-2006.html - http://www.ubuntu.com/usn/USN-3070-2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.html - http://www.ubuntu.com/usn/USN-3071-1 - http://www.debian.org/security/2016/dsa-3616 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00049.html - http://www.ubuntu.com/usn/USN-3070-4 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
http://www.ubuntu.com/usn/USN-3070-4 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.html - https://github.com/torvalds/linux/commit/93a2001bdfd5376c3dc2158653034c20392d15c5 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.html - http://www.openwall.com/lists/oss-security/2016/06/26/2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-3072-2 - http://www.ubuntu.com/usn/USN-3072-1 - http://www.ubuntu.com/usn/USN-3071-2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-5832 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T01:15:10.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2016/06/wordpress-4-5-3/ - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - http://www.securityfocus.com/bid/91362 - https://wpvulndb.com/vulnerabilities/8522 - http://www.debian.org/security/2016/dsa-3639
CVE ID: CVE-2016-5833 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T01:15:08.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5834. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2016/06/wordpress-4-5-3/ - https://wpvulndb.com/vulnerabilities/8518 - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036
//wpvulndb.com/vulnerabilities/8518 - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - https://github.com/WordPress/WordPress/commit/4372cdf45d0f49c74bbd4d60db7281de83e32648 - http://www.securityfocus.com/bid/91368
CVE ID: CVE-2016-5834 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T01:15:09.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2016/06/wordpress-4-5-3/ - https://wpvulndb.com/vulnerabilities/8518 - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - ht
db.com/vulnerabilities/8518 - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - https://github.com/WordPress/WordPress/commit/4372cdf45d0f49c74bbd4d60db7281de83e32648 - http://www.securityfocus.com/bid/91368 - http://www.debian.org/security/2016/dsa-3639
CVE ID: CVE-2016-5835 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T01:15:10.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.php and wp-admin/revision.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2016/06/wordpress-4-5-3/ - http://www.securityfocus.com/bid/91366 - https://codex.wordpress.org/Version_4.5.3 - http://www.securitytracker.com/id/1036163 - https://github.com/WordPress/WordPress/commit/a2904cc3092c391ac7027bc87f7
- http://www.securitytracker.com/id/1036163 - https://github.com/WordPress/WordPress/commit/a2904cc3092c391ac7027bc87f7806953d1a25a1 - https://wpvulndb.com/vulnerabilities/8519 - http://www.debian.org/security/2016/dsa-3639