Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9020 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T02:35:02.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in framework/modules/help/controllers/helpController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html - https://github.com/exponentcms/exponent-cms/commit/fdafb5ec97838e4edbd685f587f28d3174ebb3db - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/972
97838e4edbd685f587f28d3174ebb3db - http://seclists.org/fulldisclosure/2016/Nov/12 - http://www.securityfocus.com/bid/97269
CVE ID: CVE-2016-9021 State: PUBLISHED Published: 2020-12-31T02:09:27 Last Updated: 2024-08-06T02:35:02.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS before 2.6.0 has improper input validation in storeController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/a8efd9ca71fc9b8b843ad0910d435d237482ee31 - https://exponentcms.lighthouseapp.com/projects/61783/changesets/a8efd9ca71fc9b8b843ad0910d435d237482ee31
CVE ID: CVE-2016-9022 State: PUBLISHED Published: 2020-12-31T02:10:26 Last Updated: 2024-08-06T02:35:02.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS before 2.6.0 has improper input validation in usersController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/a8efd9ca71fc9b8b843ad0910d435d237482ee31 - https://exponentcms.lighthouseapp.com/projects/61783/changesets/a8efd9ca71fc9b8b843ad0910d435d237482ee31
CVE ID: CVE-2016-9023 State: PUBLISHED Published: 2020-12-31T02:13:32 Last Updated: 2024-08-06T02:35:02.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS before 2.6.0 has improper input validation in cron/find_help.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/a8efd9ca71fc9b8b843ad0910d435d237482ee31 - https://exponentcms.lighthouseapp.com/projects/61783/changesets/a8efd9ca71fc9b8b843ad0910d435d237482ee31
CVE ID: CVE-2016-9025 State: PUBLISHED Published: 2020-12-31T02:11:12 Last Updated: 2024-08-06T02:35:02.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/a8efd9ca71fc9b8b843ad0910d435d237482ee31 - https://exponentcms.lighthouseapp.com/projects/61783/changesets/a8efd9ca71fc9b8b843ad0910d435d237482ee31
CVE ID: CVE-2016-9026 State: PUBLISHED Published: 2020-12-31T02:12:11 Last Updated: 2024-08-06T02:35:02.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS before 2.6.0 has improper input validation in fileController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/a8efd9ca71fc9b8b843ad0910d435d237482ee31 - https://exponentcms.lighthouseapp.com/projects/61783/changesets/a8efd9ca71fc9b8b843ad0910d435d237482ee31
CVE ID: CVE-2016-9028 State: PUBLISHED Published: 2016-10-28T15:00:00 Last Updated: 2024-08-06T02:35:02.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93947 - http://www.securitytracker.com/id/1037175 - https://support.citrix.com/article/CTX218361
CVE ID: CVE-2016-9031 State: PUBLISHED Published: 2016-12-14T17:00:00 Last Updated: 2024-08-06T02:35:02.561Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Joyent Products: SmartOS Problem Types: integer overflow Description: An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with 32-bit file systems. An attacker can craft an input that can cause a kernel panic and potentially be leveraged into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-8733. Additional Analyst No
into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-8733. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94921 - http://www.talosintelligence.com/reports/TALOS-2016-0249/
CVE ID: CVE-2016-9032 State: PUBLISHED Published: 2016-12-14T17:00:00 Last Updated: 2024-08-06T02:42:09.441Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Joyent Products: SmartOS Problem Types: buffer overflow Description: An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in the nm variable leading to an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from C
an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from CVE-2016-9034. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94923 - http://www.talosintelligence.com/reports/TALOS-2016-0250/
CVE ID: CVE-2016-9033 State: PUBLISHED Published: 2016-12-14T17:00:00 Last Updated: 2024-08-06T02:42:09.431Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Joyent Products: SmartOS Problem Types: buffer overflow Description: An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in the path variable leading to an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from
o an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from CVE-2016-9035. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94928 - http://www.talosintelligence.com/reports/TALOS-2016-0251/
CVE ID: CVE-2016-9034 State: PUBLISHED Published: 2016-12-14T17:00:00 Last Updated: 2024-08-06T02:42:09.764Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Joyent Products: SmartOS Problem Types: buffer overflow Description: An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with 32-bit file systems. An attacker can craft an input that can cause a buffer overflow in the nm variable leading to an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from C
an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from CVE-2016-9032. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94930 - http://www.talosintelligence.com/reports/TALOS-2016-0252/
CVE ID: CVE-2016-9035 State: PUBLISHED Published: 2016-12-14T17:00:00 Last Updated: 2024-08-06T02:42:09.422Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Joyent Products: SmartOS Problem Types: buffer overflow Description: An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in the path variable leading to an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from
o an out of bounds memory access and could result in potential privilege escalation. This vulnerability is distinct from CVE-2016-9033. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94926 - http://www.talosintelligence.com/reports/TALOS-2016-0253/
CVE ID: CVE-2016-9036 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T02:42:09.454Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Tarantool Products: Msgpuck library Problem Types: CWE-125 Description: An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mp_check function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer, resulting in a denial of service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.
ial of service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95064 - http://www.talosintelligence.com/reports/TALOS-2016-0254/
CVE ID: CVE-2016-9037 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T02:42:09.441Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Tarantool Products: Tarantool Problem Types: CWE-125 Description: An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's value. This can lead to an out of bounds read within the context of the server. An attacker who exploits this vulnerability can cause a denial of serv
of bounds read within the context of the server. An attacker who exploits this vulnerability can cause a denial of service vulnerability on the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95063 - http://www.talosintelligence.com/reports/TALOS-2016-0255/
CVE ID: CVE-2016-9038 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T00:26:38.214Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Invincea Products: X Problem Types: kernel memory corruption Description: An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. A specially crafted input buffer and race condition can result in kernel memory corruption, which could result in privilege escalation. An attacker needs to execute a special application locally to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/
igger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99360 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0256
CVE ID: CVE-2016-9039 State: PUBLISHED Published: 2017-01-31T21:00:00 Last Updated: 2024-08-06T02:42:09.806Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Joyent Products: SmartOS Problem Types: remote code execution Description: An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploited this will result in memory exhaustion, resulting in a full system denial of service. Additional Analyst Notes: - CVE Program Container: References: -
austion, resulting in a full system denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95916 - http://www.talosintelligence.com/reports/TALOS-2016-0257/
CVE ID: CVE-2016-9040 State: PUBLISHED Published: 2018-09-07T12:00:00Z Last Updated: 2024-09-16T22:19:52.247Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Joyent Products: SmartOS Problem Types: denial of service Description: An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploit this will result in memory exhaustion, resulting in a full system denial of service. Additional Analyst Notes: - CVE Pro
this will result in memory exhaustion, resulting in a full system denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0258
CVE ID: CVE-2016-9041 State: REJECTED Published: 2017-01-24T22:00:00 Last Updated: 2017-01-24T21:57:01 Description: No description available.
CVE ID: CVE-2016-9042 State: PUBLISHED Published: 2018-06-04T20:00:00Z Last Updated: 2024-09-17T03:53:51.612Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Talos Products: Network Time Protocol Problem Types: denial of service Description: An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition. Additional Analyst Notes: - CVE
eck (TEST2) causing the reply to be dropped and creating a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038123 - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc - http://www.securitytracker.com/id/1039427 - http://www.securityfocus.com/bid/97046 - http://www.ubuntu.com/usn/USN-3349-1 - http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded - http://seclists.org/fulldisclosure/2017/Nov/7 - http://www.securityfocus.com/archive/1/540403/100/0/threaded - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/ - http://seclists.org/fulldisclosure/2017/Sep/62 - http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260 - http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10201 - https://support.apple.com/kb/HT208144 - https://support.f5.com/csp/article/K39041624 - https://bto.bluecoat.com/security
https://support.apple.com/kb/HT208144 - https://support.f5.com/csp/article/K39041624 - https://bto.bluecoat.com/security-advisory/sa147 - http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2016-9043 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T21:09:07.251Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Corel Products: CorelDRAW Problem Types: Out of bounds Write Description: An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.0.661). A specially crafted EMF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific EMF file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99900 - https
ability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99900 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0261
CVE ID: CVE-2016-9044 State: PUBLISHED Published: 2018-09-07T17:00:00Z Last Updated: 2024-09-17T03:07:36.283Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Information Builders Products: WebFOCUS Problem Types: command injection Description: An exploitable command execution vulnerability exists in Information Builders WebFOCUS Business Intelligence Portal 8.1 . A specially crafted web parameter can cause a command injection. An authenticated attacker can send a crafted web request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0315
CVE ID: CVE-2016-9045 State: PUBLISHED Published: 2018-09-17T15:00:00Z Last Updated: 2024-09-16T23:25:25.869Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ProcessMaker Products: ProcessMaker Enterprise Problem Types: remote code execution Description: A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0314
CVE ID: CVE-2016-9046 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2016-9047 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2016-9048 State: PUBLISHED Published: 2018-09-10T16:00:00Z Last Updated: 2024-09-16T22:40:42.051Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: ProcessMaker Products: ProcessMaker Enterprise Problem Types: SQL injection Description: Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain setups access the underlying operating system. Additional
exfiltration of the database, user credentials and in certain setups access the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0313
CVE ID: CVE-2016-9049 State: PUBLISHED Published: 2017-02-21T22:00:00 Last Updated: 2024-08-06T02:42:09.798Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Aerospike Products: Database Server Problem Types: remote code execution Description: An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server process to dereference a null pointer. An attacker can simply connect to a TCP port in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96376 - http://www.talosintelli
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96376 - http://www.talosintelligence.com/reports/TALOS-2016-0263/
CVE ID: CVE-2016-9050 State: PUBLISHED Published: 2017-01-26T21:00:00 Last Updated: 2024-08-06T02:42:09.930Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Aerospike Products: Database Server Problem Types: out-of-bounds read Description: An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds read resulting in disclosure of memory within the process, the same vulnerability can also be used to trigger a denial of service. An attacker can simply connect to the port and send the packet to trigger this vulnerability. Additional
al of service. An attacker can simply connect to the port and send the packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95415 - http://www.talosintelligence.com/reports/TALOS-2016-0264/
CVE ID: CVE-2016-9051 State: PUBLISHED Published: 2017-02-21T22:00:00 Last Updated: 2024-08-06T02:42:09.936Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Aerospike Products: Database Server Problem Types: remote code execution Description: An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds write resulting in memory corruption which can lead to remote code execution. An attacker can simply connect to the port to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - ht
y connect to the port to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96374 - http://www.talosintelligence.com/reports/TALOS-2016-0265/
CVE ID: CVE-2016-9052 State: PUBLISHED Published: 2017-01-26T21:00:00 Last Updated: 2024-08-06T02:42:09.763Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Aerospike version Aerospike Database Server 3.10.0.3 Problem Types: stack-based buffer overflow Description: An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function as_sindex__simatch_by_iname resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability. Additional Analyst Notes: - CV
code execution. An attacker can simply connect to the port to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95419 - http://www.talosintelligence.com/reports/TALOS-2016-0266/
CVE ID: CVE-2016-9053 State: PUBLISHED Published: 2017-02-21T22:00:00 Last Updated: 2024-08-06T02:42:10.013Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Aerospike Products: Database Server Problem Types: denial of service Description: An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server to fetch a function table outside the bounds of an array resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http
connect to the port to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96372 - http://www.talosintelligence.com/reports/TALOS-2016-0267/