Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ecurityfocus.com/bid/94452 - http://rhn.redhat.com/errata/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - https://www.kb.cert.org/vuls/id/633847 - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
CVE ID: CVE-2016-9311 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:50:36.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - http://www.securityfocus.com/bid/94444 - https://usn.ubuntu.com/3707-2/ - http://rhn.redhat.com/errata/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerab
- http://rhn.redhat.com/errata/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - https://www.kb.cert.org/vuls/id/633847 - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03885en_us - http://support.ntp.org/bin/view/Main/NtpBug3119
CVE ID: CVE-2016-9312 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:50:37.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - https://www.kb.cert.org/vuls/id/633847 - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - http://www.securityfocus.com/bid/94450 - http://support.ntp.org/bin/view/Main/NtpBug31
oat.com/security-advisory/sa139 - http://www.securityfocus.com/bid/94450 - http://support.ntp.org/bin/view/Main/NtpBug3110
CVE ID: CVE-2016-9313 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T02:50:37.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: security/keys/big_key.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registration, which allows local users to cause a denial of service (NULL pointer dereference and panic) or possibly have unspecified other impact via a crafted application that uses the big_key data type. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/22/1 - https://github.com/torvalds/linux/commit/7df3e59c3d1df4f87fe87
http://www.openwall.com/lists/oss-security/2016/07/22/1 - https://github.com/torvalds/linux/commit/7df3e59c3d1df4f87fe874c7956ef7a3d2f4d5fb - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7 - http://www.securityfocus.com/bid/94546 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7df3e59c3d1df4f87fe874c7956ef7a3d2f4d5fb
CVE ID: CVE-2016-9314 State: PUBLISHED Published: 2017-02-21T07:46:00 Last Updated: 2024-08-06T02:50:37.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to backup the system configuration and download it onto their local machine. This backup file contains sensitive information like passwd/shadow files, RSA certificates, Private Keys and Default Passphrase, etc. This was resolved in Version 6.5 CP 1737. Additional Analyst Notes: - CVE Progr
rivate Keys and Default Passphrase, etc. This was resolved in Version 6.5 CP 1737. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96252 - https://success.trendmicro.com/solution/1116672 - http://www.securitytracker.com/id/1037849
CVE ID: CVE-2016-9315 State: PUBLISHED Published: 2017-02-21T07:46:00 Last Updated: 2024-08-06T02:50:36.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to change Master Admin's password and/or add new admin accounts. This was resolved in Version 6.5 CP 1737. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96252 - https://success.trendmicro.com/solution/1116672 - http://www
ner: References: - http://www.securityfocus.com/bid/96252 - https://success.trendmicro.com/solution/1116672 - http://www.securitytracker.com/id/1037849
CVE ID: CVE-2016-9316 State: PUBLISHED Published: 2017-02-21T07:46:00 Last Updated: 2024-08-06T02:50:36.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allow authenticated, remote users with least privileges to inject arbitrary HTML/JavaScript code into web pages. This was resolved in Version 6.5 CP 1737. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96252 - https://success.trendmicro.com/solution/11166
Program Container: References: - http://www.securityfocus.com/bid/96252 - https://success.trendmicro.com/solution/1116672 - http://www.securitytracker.com/id/1037849
CVE ID: CVE-2016-9317 State: PUBLISHED Published: 2017-01-26T15:00:00 Last Updated: 2024-08-06T02:50:36.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md - https://github.com/libgd/libgd/commit/1846f48e5fcdde996e7c27a4bbac5d0aef183e4b - http://www.debian.org/security/2017/dsa-3777 - http://www.securityfocus.com/bid/95841
CVE ID: CVE-2016-9318 State: PUBLISHED Published: 2016-11-16T00:00:00 Last Updated: 2024-08-06T02:50:36.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=772726 - https://github.com/lsh123/xmlsec/issues/43 - https://usn.ubuntu.com/3739-1/ - https://security.gentoo.or
cgi?id=772726 - https://github.com/lsh123/xmlsec/issues/43 - https://usn.ubuntu.com/3739-1/ - https://security.gentoo.org/glsa/201711-01 - http://www.securityfocus.com/bid/94347 - https://usn.ubuntu.com/3739-2/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html
CVE ID: CVE-2016-9319 State: PUBLISHED Published: 2017-03-31T00:00:00 Last Updated: 2024-08-06T02:50:37.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97272 - http://www.info-sec.ca/advisories/Trend-Micro-Enterprise-Mobile-Security.html - https://success.trendmicro.com/solution/1116973
CVE ID: CVE-2016-9322 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9323 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9324 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9325 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9326 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9327 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9328 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9329 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9330 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9331 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9332 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:36.933Z Vendors: n/a Products: Moxa SoftCMS prior to Version 1.6 Problem Types: Moxa SoftCMS denial-of-service Description: An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 - http://www.securityfocus.com/bid/94394 - https://www.exploit-db.c
tps://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 - http://www.securityfocus.com/bid/94394 - https://www.exploit-db.com/exploits/40779/
CVE ID: CVE-2016-9333 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:36.963Z Vendors: n/a Products: Moxa SoftCMS prior to Version 1.6 Problem Types: Moxa SoftCMS SQL INJECTION Description: An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input (SQL INJECTION). Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02 - http://www.securityfocus.com/bid/94394
CVE ID: CVE-2016-9334 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:38.367Z Vendors: n/a Products: Rockwell Automation MicroLogix 1100 and 1400 Problem Types: Rockwell Automation MicroLogix 1100 and 1400 cleartext password Description: An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attac
, Version 14.000 and prior versions. User credentials are sent to the web server in clear text, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-06 - http://www.securityfocus.com/bid/95302
CVE ID: CVE-2016-9335 State: PUBLISHED Published: 2018-05-09T13:00:00Z Last Updated: 2024-09-16T19:04:11.086Z Vendors: Red Lion Controls, AutomationDirect Products: Sixnet-Managed Industrial Switches, STRIDE-Managed Ethernet Switch models Problem Types: CWE-321 Description: A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmware Version 5.0.190. Vulnerable versions of Stride-Managed Ethernet switches and Sixnet-Managed Industrial switches use hard-coded HTTP SSL/SSH keys for secure communication. Because these keys cannot be regenerated by users,
switches use hard-coded HTTP SSL/SSH keys for secure communication. Because these keys cannot be regenerated by users, all products use the same key. The attacker could disrupt communication or compromise the system. CVSS v3 base score: 10, CVSS vector string: (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Red Lion Controls recommends updating to SLX firmware Version 5.3.174. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-054-02
CVE ID: CVE-2016-9336 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9337 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:37.047Z Vendors: n/a Products: Tesla Gateway ECU on Model S automobile Problem Types: Tesla Gateway ECU Command Injection Description: An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionality enabled. The vehicle's Gateway ECU is susceptible to commands that may allow an attacker to install malicious software allowing the attacker to send messages to the vehicle's CAN bus, a Command Injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94697 - https://ics
n. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94697 - https://ics-cert.us-cert.gov/advisories/ICSA-16-341-01
CVE ID: CVE-2016-9338 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:36.961Z Vendors: n/a Products: Rockwell Automation MicroLogix 1100 and 1400 Problem Types: Rockwell Automation MicroLogix 1100 and 1400 Incorrect Permission Assignment for Critical Resource Description: An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. Because of an Incorrect Permission Assignment fo
ns; and 1763-L16DWD, Series A and B, Version 14.000 and prior versions. Because of an Incorrect Permission Assignment for Critical Resource, users with administrator privileges may be able to remove all administrative users requiring a factory reset to restore ancillary web server function. Exploitation of this vulnerability will still allow the affected device to function in its capacity as a controller. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-06 - http://www.securityfocus.com/bid/95302
CVE ID: CVE-2016-9339 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:36.987Z Vendors: n/a Products: INTERSCHALT VDR G4e 5.220 and prior Problem Types: INTERSCHALT VDR G4e Path Traversal Vulnerability Description: An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to construct paths to files and directories without properly neutralizing special elements within the pathname that could allow an attacker to read files on the system, a Path Traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94776 - https://ics-cert.us-cert.gov/advisories/ICSA-16-3
gram Container: References: - http://www.securityfocus.com/bid/94776 - https://ics-cert.us-cert.gov/advisories/ICSA-16-343-04
CVE ID: CVE-2016-9340 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9341 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9342 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9343 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:38.224Z Vendors: n/a Products: Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 Problem Types: Rockwell Automation Logix5000 Programmable Automation Controller Buffer Overflow Vulnerability Description: An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware versions prior to FRN 16.00, which are not affected). By sending malformed common industrial protocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initi
tocol (CIP) packet, an attacker may be able to overflow a stack-based buffer and execute code on the controller or initiate a nonrecoverable fault resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-343-05 - http://www.securityfocus.com/bid/95304
CVE ID: CVE-2016-9344 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:36.933Z Vendors: n/a Products: Moxa MiiNePort Problem Types: Moxa MiiNePort Session Hijack Description: An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. An attacker may be able to brute force an active session cookie to be able to download configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-343-01 - http://www.securityfocus.com/bid/94783
CVE ID: CVE-2016-9345 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:37.647Z Vendors: n/a Products: Emerson DeltaV Easy Security Management through 13.3 Problem Types: Emerson DeltaV Easy Security Management Application Vulnerability Description: An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-334-02 - http://www.securityfocus.com/bid/105767 - http://www.securityfocus.com/bid/9
ert.us-cert.gov/advisories/ICSA-16-334-02 - http://www.securityfocus.com/bid/105767 - http://www.securityfocus.com/bid/94584
CVE ID: CVE-2016-9346 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:37.465Z Vendors: n/a Products: Moxa MiiNePort Problem Types: Moxa MiiNePort Configuration data not encrypted Description: An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. Configuration data are stored in a file that is not encrypted. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-343-01 - http://www.securityfocus.com/bid/94783
CVE ID: CVE-2016-9347 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:36.958Z Vendors: n/a Products: Emerson DeltaV Wireless I/O Card 13.3 Problem Types: Emerson DeltaV Wireless I/O Card Open SSH Port Vulnerability Description: An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards (WIOC) running the firmware available in the DeltaV system, release v13.3, have the SSH (Secure Shell) functionality enabled unnecessarily. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94586 - https://ics-cert.us-cert.gov/advisories/IC
CVE Program Container: References: - http://www.securityfocus.com/bid/94586 - https://ics-cert.us-cert.gov/advisories/ICSA-16-334-03
CVE ID: CVE-2016-9348 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:37.633Z Vendors: n/a Products: Moxa NPort Problem Types: Moxa NPort Device passwords in plaintext Description: An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8
prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. A configuration file contains parameters that represent passwords in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 - http://www.securityfocus.com/bid/85965
CVE ID: CVE-2016-9349 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:37.399Z Vendors: n/a Products: Advantech SUSIAccess Server 3.0 and prior Problem Types: Advantech SUSIAccess Server traverse the file system Description: An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can result in information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-04 - http://www.securityfocus.com/bid/94629 - https://www.exploit-db.com/exploits/42401/ - https://www.exploit-db.com/exploits/42402/
CVE ID: CVE-2016-9350 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9351 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:50:37.632Z Vendors: n/a Products: Advantech SUSIAccess Server 3.0 and prior Problem Types: Advantech SUSIAccess Server traversal Description: An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload and unpack a zip file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-04 - http://www.securityfocus.com/bid/94629 - https://www.exploit-db.com/exploits/42402/
CVE ID: CVE-2016-9352 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.