Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5661 State: PUBLISHED Published: 2016-07-15T18:00:00 Last Updated: 2024-08-06T01:07:59.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/665280 - http://www.securityfocus.com/bid/91765 - http://www.kb.cert.org/vuls/id/JLAD-ABMPVA
CVE ID: CVE-2016-5662 State: PUBLISHED Published: 2016-08-26T19:00:00 Last Updated: 2024-08-06T01:08:00.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/305607 - http://www.securityfocus.com/bid/92662
CVE ID: CVE-2016-5663 State: PUBLISHED Published: 2016-08-26T19:00:00 Last Updated: 2024-08-06T01:08:00.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (1) code, (2) error, or (3) error_description parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/305607 - http://www.securityfocus.com/bid/92662
CVE ID: CVE-2016-5664 State: PUBLISHED Published: 2016-08-26T19:00:00 Last Updated: 2024-08-06T01:07:59.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/305607 - http://www.securityfocus.com/bid/92662
CVE ID: CVE-2016-5666 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T01:07:59.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92211 - http://www.kb.cert.org/vuls/id/974424
CVE ID: CVE-2016-5667 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T01:08:00.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct request to a page other than index.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92211 - http://www.kb.cert.org/vuls/id/974424
CVE ID: CVE-2016-5668 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T01:08:00.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change settings via a JSON API call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92211 - http://www.kb.cert.org/vuls/id/974424
CVE ID: CVE-2016-5669 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T01:08:00.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an OpenSSL Test Certification Authority, which makes it easier for remote attackers to conduct man-in-the-middle attacks against HTTPS sessions by leveraging the certificate's trust relationship. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92211 - http://www.kb.cert.org/vuls/id/974424
CVE ID: CVE-2016-5670 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T01:08:00.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92211 - http://www.kb.cert.org/vuls/id/974424
CVE ID: CVE-2016-5671 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T01:07:59.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92211 - http://www.kb.cert.org/vuls/id/974424
CVE ID: CVE-2016-5672 State: PUBLISHED Published: 2016-08-01T01:00:00 Last Updated: 2024-08-06T01:08:00.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Crosswalk before 19.49.514.5, 20.x before 20.50.533.11, 21.x before 21.51.546.0, and 22.x before 22.51.549.0 interprets a user's acceptance of one invalid X.509 certificate to mean that all invalid X.509 certificates should be accepted without prompting, which makes it easier for man-in-the-middle attackers to spoof SSL servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.intel.com/evangelists/2016/07/28/crosswalk-security-vulne
st Notes: - CVE Program Container: References: - https://blogs.intel.com/evangelists/2016/07/28/crosswalk-security-vulnerability/ - http://www.securityfocus.com/bid/92199 - https://wwws.nightwatchcybersecurity.com/2016/07/29/advisory-intel-crosswalk-ssl-prompt-issue - https://crosswalk-project.org/jira/browse/XWALK-6986 - http://packetstormsecurity.com/files/138107/Intel-Crosswalk-Project-Man-In-The-Middle.html - https://lists.crosswalk-project.org/pipermail/crosswalk-help/2016-July/002167.html - http://www.securityfocus.com/archive/1/539051/100/0/threaded - http://www.kb.cert.org/vuls/id/217871
CVE ID: CVE-2016-5673 State: PUBLISHED Published: 2016-08-25T21:00:00 Last Updated: 2024-08-06T01:07:59.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-A9WQVP - http://www.kb.cert.org/vuls/id/735416 - http://www.securityfocus.com/bid/92348
CVE ID: CVE-2016-5674 State: PUBLISHED Published: 2016-08-31T15:00:00 Last Updated: 2024-08-06T01:07:59.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856152 - http://www.securityfocus.com/bid/92318 - https://www.exploit-db.com/exploits/40200/
CVE ID: CVE-2016-5675 State: PUBLISHED Published: 2016-08-31T15:00:00 Last Updated: 2024-08-06T01:07:59.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856152 - http://www.securityfocus.com/bid/92318 - https://www.exploit-db.com/exploits/40200/
CVE ID: CVE-2016-5676 State: PUBLISHED Published: 2016-08-31T15:00:00 Last Updated: 2024-08-06T01:07:59.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856152 - http://www.securityfocus.com/bid/92318 - https://www.exploit-db.com/exploits/40200/
CVE ID: CVE-2016-5677 State: PUBLISHED Published: 2016-08-31T15:00:00 Last Updated: 2024-08-06T01:07:59.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an __nvr_status___.php request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856152 - http://www.securityfocus.com/bid/92318 - https://www.exploit-db.com/exploits/40200/
CVE ID: CVE-2016-5678 State: PUBLISHED Published: 2016-08-31T15:00:00 Last Updated: 2024-08-06T01:08:00.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856152 - http://www.securityfocus.com/bid/92318 - https://www.exploit-db.com/exploits/40200/
CVE ID: CVE-2016-5679 State: PUBLISHED Published: 2016-08-31T15:00:00 Last Updated: 2024-08-06T01:08:00.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856152 - http://www.securityfocus.com/bid/92318 - https://www.exploit-db.com/exploits/40200/
CVE ID: CVE-2016-5680 State: PUBLISHED Published: 2016-08-31T15:00:00 Last Updated: 2024-08-06T01:07:59.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transfer_license command. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856152 - http://www.securityfocus.com/bid/92318 - https://www.exploit-db.com/exploits/40200/
CVE ID: CVE-2016-5681 State: PUBLISHED Published: 2016-08-25T21:00:00 Last Updated: 2024-08-06T01:08:00.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before 1.11WWb07, DIR-880L A1 1.07 before 1.07WWb08, DIR-868L B1 2.03 before 2.03WWb01, and DIR-868L C1 3.00 before 3.00WWb01 devices allows remote attackers to execute arbitrary code via a long session cookie. Additional Analyst Notes: - CVE
b01 devices allows remote attackers to execute arbitrary code via a long session cookie. Additional Analyst Notes: - CVE Program Container: References: - http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10063 - http://www.kb.cert.org/vuls/id/332115 - http://www.securityfocus.com/bid/92427
CVE ID: CVE-2016-5682 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T01:08:00.436Z Vendors: n/a Products: Swagger-UI before 2.2.1 Problem Types: XSS Description: Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/community/infosec/blog/2016/09/02/r7-2016-19-persistent-xss-via-unescaped-parameters-in-swagger-ui
CVE ID: CVE-2016-5683 State: PUBLISHED Published: 2016-08-26T19:00:00 Last Updated: 2024-08-06T01:08:00.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/294272 - http://www.securityfocus.com/bid/92487
CVE ID: CVE-2016-5684 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T01:08:00.415Z Vendors: FreeImage Products: FreeImage Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0189/ - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - http://
ce.com/reports/TALOS-2016-0189/ - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - http://www.securityfocus.com/bid/93287 - https://security.gentoo.org/glsa/201701-68 - https://usn.ubuntu.com/3925-1/
CVE ID: CVE-2016-5685 State: PUBLISHED Published: 2016-11-29T15:00:00 Last Updated: 2024-08-06T01:08:00.545Z Vendors: Dell EMC Products: iDRAC7 and iDRAC8 Problem Types: string injection Description: Dell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain Bash shell access through a string injection. Additional Analyst Notes: - CVE Program Container: References: - http://en.community.dell.com/techcenter/extras/m/white_papers/20443326 - http://www.securityfocus.com/bid/94585
CVE ID: CVE-2016-5686 State: PUBLISHED Published: 2016-10-05T10:00:00 Last Updated: 2024-08-06T01:07:59.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/community/infosec/blog/2016/10/04/r7-2016-07-multiple-vulnerabilities-in-animas-onetouch-ping-insulin-pump - http://www.kb.cert.org/vuls/id/BLUU-A9SQRS - http://www.kb.cert.org/vuls/id/884840 - http://www.securityfocus.com/bid/93351
CVE ID: CVE-2016-5687 State: PUBLISHED Published: 2016-12-13T15:00:00 Last Updated: 2024-08-06T01:08:00.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91283 - https://blog.fuzzing-project.org/46-Various-invalid-memory-reads-in-ImageMagick-WPG%2C-DDS%2C-DCM.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists
CM.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/06/17/3 - http://www.openwall.com/lists/oss-security/2016/06/14/5
CVE ID: CVE-2016-5688 State: PUBLISHED Published: 2016-12-13T15:00:00 Last Updated: 2024-08-06T01:07:59.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex function or an invalid write operation in the (2) ScaleCharToQuantum or (3) SetPixelIndex functions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commits/7.0.1-5 - https://github.com/ImageMag
rogram Container: References: - https://github.com/ImageMagick/ImageMagick/commits/7.0.1-5 - https://github.com/ImageMagick/ImageMagick/commits/6.9.4-4 - http://www.securityfocus.com/bid/91283 - https://blog.fuzzing-project.org/46-Various-invalid-memory-reads-in-ImageMagick-WPG%2C-DDS%2C-DCM.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://github.com/ImageMagick/ImageMagick/commit/aecd0ada163a4d6c769cec178955d5f3e9316f2f - http://www.openwall.com/lists/oss-security/2016/06/17/3 - https://github.com/ImageMagick/ImageMagick/commit/fc43974d34318c834fbf78570ca1a3764ed8c7d7 - http://www.openwall.com/lists/oss-security/2016/06/14/5
CVE ID: CVE-2016-5689 State: PUBLISHED Published: 2016-12-13T15:00:00 Last Updated: 2024-08-06T01:07:59.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91283 - https://blog.fuzzing-project.org/46-Various-invalid-memory-reads-in-ImageMagick-WPG%2C-DDS%2C-DCM.html - https://github.com/ImageMagick/ImageMagick/commit/5511ef530576ed18fd636baa3bb4eda3d667665d - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-
ick/commit/5511ef530576ed18fd636baa3bb4eda3d667665d - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://github.com/ImageMagick/ImageMagick/blob/7.0.1-7/ChangeLog - https://github.com/ImageMagick/ImageMagick/blob/6.9.4-5/ChangeLog - http://www.openwall.com/lists/oss-security/2016/06/17/3 - http://www.openwall.com/lists/oss-security/2016/06/14/5
CVE ID: CVE-2016-5690 State: PUBLISHED Published: 2016-12-13T15:00:00 Last Updated: 2024-08-06T01:07:59.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91283 - https://blog.fuzzing-project.org/46-Various-invalid-memory-reads-in-ImageMagick-WPG%2C-DDS%2C-DCM.html - https://github.com/ImageMagick/ImageMagick/commit/5511ef530576ed18fd636baa3bb4eda3d667665d - http:/
2C-DDS%2C-DCM.html - https://github.com/ImageMagick/ImageMagick/commit/5511ef530576ed18fd636baa3bb4eda3d667665d - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://github.com/ImageMagick/ImageMagick/blob/7.0.1-7/ChangeLog - https://github.com/ImageMagick/ImageMagick/blob/6.9.4-5/ChangeLog - http://www.openwall.com/lists/oss-security/2016/06/17/3 - http://www.openwall.com/lists/oss-security/2016/06/14/5
CVE ID: CVE-2016-5691 State: PUBLISHED Published: 2016-12-13T15:00:00 Last Updated: 2024-08-06T01:08:00.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2) pixel.green, and (3) pixel.blue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91283 - https://blog.fuzzing-project.org/46-Various-invalid-memory-reads-in-ImageMagick-WPG%2C-DDS%2C-DCM.html - https://github.com/ImageMagick/ImageMagick/commit/5511ef530576ed18fd636baa3bb4eda3d667665d - http://www.oracle.com
tml - https://github.com/ImageMagick/ImageMagick/commit/5511ef530576ed18fd636baa3bb4eda3d667665d - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://github.com/ImageMagick/ImageMagick/blob/7.0.1-7/ChangeLog - https://github.com/ImageMagick/ImageMagick/blob/6.9.4-5/ChangeLog - http://www.openwall.com/lists/oss-security/2016/06/17/3 - http://www.openwall.com/lists/oss-security/2016/06/14/5
CVE ID: CVE-2016-5696 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T01:08:00.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://github.com/Gnoxter/mountain_goat - http://www.ubuntu.com/usn/USN-3070-1 - http://rhn.redhat.com/errata/RHSA-2016-1657.html - https://bto.bluecoat.com/security-advi
ww.ubuntu.com/usn/USN-3070-1 - http://rhn.redhat.com/errata/RHSA-2016-1657.html - https://bto.bluecoat.com/security-advisory/sa131 - https://github.com/torvalds/linux/commit/75ff39ccc1bd5d3c455b6822ab09e533c551f758 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://rhn.redhat.com/errata/RHSA-2016-1814.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10167 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/91704 - http://www.ubuntu.com/usn/USN-3070-3 - http://www.ubuntu.com/usn/USN-3070-2 - http://rhn.redhat.com/errata/RHSA-2016-1815.html - http://rhn.redhat.com/errata/RHSA-2016-1939.html -
m/usn/USN-3070-2 - http://rhn.redhat.com/errata/RHSA-2016-1815.html - http://rhn.redhat.com/errata/RHSA-2016-1939.html - http://www.ubuntu.com/usn/USN-3071-1 - http://rhn.redhat.com/errata/RHSA-2016-1632.html - https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_cao.pdf - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758 - http://www.ubuntu.com/usn/USN-3070-4 - http://www.securitytracker.com/id/1036625 - http://rhn.redhat.com/errata/RHSA-2016-1631.html - https://bugzilla.redhat.com/show_bug.cgi?id=1354708 - http://www.ubuntu.com/usn/USN-3072-2 - http://rhn.redhat.com/errata/RHSA-2016-1633.html - http://r
_bug.cgi?id=1354708 - http://www.ubuntu.com/usn/USN-3072-2 - http://rhn.redhat.com/errata/RHSA-2016-1633.html - http://rhn.redhat.com/errata/RHSA-2016-1664.html - http://www.ubuntu.com/usn/USN-3072-1 - http://www.prnewswire.com/news-releases/mitnick-attack-reappears-at-geekpwn-macau-contest-300270779.html - http://www.openwall.com/lists/oss-security/2016/07/12/2 - http://www.ubuntu.com/usn/USN-3071-2 - https://security.paloaltonetworks.com/CVE-2016-5696 - https://www.arista.com/en/support/advisories-notices/security-advisories/1461-security-advisory-23
CVE ID: CVE-2016-5697 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:07:59.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/24/3