Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4953 State: PUBLISHED Published: 2016-07-05T01:00:00 Last Updated: 2024-08-06T00:46:39.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html - http://www.securityfocus.com/bid/91010 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24
opensuse.org/opensuse-security-announce/2016-06/msg00023.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us - http://support.ntp.org/bin/view/Main/NtpBug3045 - http://www.securitytracker.com/id/1036037 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://www.kb.cert.org/vuls/id/321640 - http://support.ntp.org
se.org/opensuse-security-announce/2016-08/msg00042.html - http://www.kb.cert.org/vuls/id/321640 - http://support.ntp.org/bin/view/Main/SecurityNotice - http://bugs.ntp.org/3045 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html - https://security.gentoo.org/glsa/201607-15 - http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd - http://www.securityfocus.com/archive/1/540683/100/0/threaded - http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-Free
tyfocus.com/archive/1/540683/100/0/threaded - http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-FreeBSD-SA-16-24.ntp.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html - http://www.securityfocus.com/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/540683/100/0/threaded - http://www.securityfocus.com/archive/1/538600/100/0/threaded - https://www.kb.cert.org/vuls/id/321640 - http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics
/1/538600/100/0/threaded - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2016-4954 State: PUBLISHED Published: 2016-07-05T01:00:00 Last Updated: 2024-08-06T00:46:39.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html - http://www.ubuntu.com/usn/USN-3096-1 - https://lists.fedoraproject.org/archives/list/packag
unce/2016-06/msg00028.html - http://www.ubuntu.com/usn/USN-3096-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/ - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us - http://www.securitytracker.com/id/1036037 -
om/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us - http://www.securitytracker.com/id/1036037 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://support.ntp.org/bin/view/Main/NtpBug3044 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://www.kb.cert.org/vuls/id/321640 - http://support.ntp.org/bin/view/Main/SecurityNotice - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg0004
ect.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html - http://bugs.ntp.org/3044 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html - https://security.gentoo.org/glsa/201607-15 - http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd - http://www.securityfocus.com/archive/1/540683/100/0/threaded - http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-FreeBSD-SA-16-24.ntp.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html -
curity-Advisory-FreeBSD-SA-16-24.ntp.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html - http://www.securityfocus.com/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/540683/100/0/threaded - http://www.securityfocus.com/archive/1/538600/100/0/threaded - https://www.kb.cert.org/vuls/id/321640 - http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https:
us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2016-4955 State: PUBLISHED Published: 2016-07-05T01:00:00 Last Updated: 2024-08-06T00:46:39.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html - http://www.ubuntu.com/usn/USN-3096-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.or
/www.ubuntu.com/usn/USN-3096-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/ - http://www.securityfocus.com/bid/91007 - http://support.ntp.org/bin/view/Main/NtpBug3043 - http://www.securitytracker.com/id/1036037 - http://lists.opensuse.org/opensuse-security-a
org/bin/view/Main/NtpBug3043 - http://www.securitytracker.com/id/1036037 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://bugs.ntp.org/3043 - http://www.kb.cert.org/vuls/id/321640 - http://support.ntp.org/bin/view/Main/SecurityNotice - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2016-0
nsuse.org/opensuse-security-announce/2016-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html - https://security.gentoo.org/glsa/201607-15 - http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd - http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-FreeBSD-SA-16-24.ntp.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html - http://www.securityfocus.com/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/538600/100/0/threaded - https://www.kb.cert.org/vuls/id
1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/538600/100/0/threaded - https://www.kb.cert.org/vuls/id/321640 - http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2016-4956 State: PUBLISHED Published: 2016-07-05T01:00:00 Last Updated: 2024-08-06T00:46:40.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html - http://www.ubuntu.com/usn/USN-3096-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY7
N-3096-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/ - http://www.securityfocus.com/bid/91009 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/ - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us - http://www.securitytracker.com/id/1036037 - http://lists.ope
ic/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us - http://www.securitytracker.com/id/1036037 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://support.ntp.org/bin/view/Main/NtpBug3042 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://bugs.ntp.org/3042 - http://www.kb.cert.org/vuls/id/321640 - http://support.ntp.org/bin/view/Main/SecurityNotice - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/ - http://lists.opensuse.org/opensuse-security-announce/2016
.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html - https://security.gentoo.org/glsa/201607-15 - http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd - http://www.securityfocus.com/archive/1/540683/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html - http://www.securityfocus.com/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/5
html - http://www.securityfocus.com/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/540683/100/0/threaded - http://www.securityfocus.com/archive/1/538600/100/0/threaded - https://www.kb.cert.org/vuls/id/321640 - http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2016-4957 State: PUBLISHED Published: 2016-07-05T01:00:00 Last Updated: 2024-08-06T00:46:40.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc - http://bugs.ntp.org/3046 - http://www.securityt
tml - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc - http://bugs.ntp.org/3046 - http://www.securitytracker.com/id/1036037 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.kb.cert.org/vuls/id/321640 - http://support.ntp.org/bin/view/Main/SecurityNotice - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html - http://support.ntp.org/bin/view/Main/NtpBug3046 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html - https://security.gentoo.org/glsa/201607-15
CVE ID: CVE-2016-4959 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T00:46:39.859Z Vendors: n/a Products: Quadro, NVS, GeForce (all versions) Problem Types: Denial of Service Description: For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4213 - http://www.tripwire.com/state-of-security/vulnerability-management/warning-this-post-contains-graphic-nvidia-content/ - http://www.securityfocus.
tate-of-security/vulnerability-management/warning-this-post-contains-graphic-nvidia-content/ - http://www.securityfocus.com/bid/93256 - https://support.lenovo.com/us/en/product_security/ps500070
CVE ID: CVE-2016-4960 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T00:46:39.887Z Vendors: n/a Products: Quadro, NVS, GeForce (all versions) Problem Types: Escalation of Privileges Description: For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4213 - https://support.lenovo.com/us/en/product_security/ps500070 - http://www.securityfocus.com/bid/93251
CVE ID: CVE-2016-4961 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T00:46:39.870Z Vendors: n/a Products: Quadro, NVS, GeForce (all versions) Problem Types: Denial of Service Description: For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys API layer caused a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4213 - https://support.lenovo.com/us/en/product_security/ps500070 - http://www.securityfocus.com/bid/93251
CVE ID: CVE-2016-4962 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T00:46:39.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://xenbits.xen.org/xsa/advisory-175.html - http://www.securityfocus.com/bid/91006 - http://www.debian.org/securi
l - http://xenbits.xen.org/xsa/advisory-175.html - http://www.securityfocus.com/bid/91006 - http://www.debian.org/security/2016/dsa-3633 - http://www.securitytracker.com/id/1036023
CVE ID: CVE-2016-4963 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T00:46:40.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management tool confusion) by manipulating information in the backend directories in xenstore. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00006.html - http://www.securitytracker.com/id/1036024 - http://xenbits.xen.org/xsa/advisory-178.html
CVE ID: CVE-2016-4964 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T00:46:40.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s->state. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/24/7 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04027.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=06630554ccbdd25780aa03c3548aaff1eb56dffd - http://w
16-05/msg04027.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=06630554ccbdd25780aa03c3548aaff1eb56dffd - http://www.openwall.com/lists/oss-security/2016/05/24/4 - https://security.gentoo.org/glsa/201609-01
CVE ID: CVE-2016-4965 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:46:39.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosis_control.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92779 - http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf - https://www.kb.cert.org/vuls/id/724487 - http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities
CVE ID: CVE-2016-4966 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:46:39.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter. Additional Analyst Notes: - CVE Program Container: References: - http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf - https://www.kb.cert.org/vuls/id/724487 - http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities - http://www.securityfocus.com/bid/92781
CVE ID: CVE-2016-4967 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:46:39.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of the device configuration via script/cfg_show.php or (2) PCAP files via script/system/tcpdump.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92779 - http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf - https://www.kb.cert.org/vuls/id/724487 - http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities
CVE ID: CVE-2016-4968 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:46:39.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92779 - http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf - https://www.kb.cert.org/vuls/id/724487 - http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities
CVE ID: CVE-2016-4969 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:46:39.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statistics/getconn.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92779 - http://docs.fortinet.com/uploaded/files/3236/fortiwan-v4.2.5-release-notes.pdf - https://www.kb.cert.org/vuls/id/724487 - http://fortiguard.com/advisory/fortiwan-multiple-vulnerabilities
CVE ID: CVE-2016-4970 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T00:46:39.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop). Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0179.html - http://rhn.redhat.com/errata/RHSA-2017-1097.html - http://netty.io/news/2016/06/07/4-1-1-Final.html - http://www.securityfocus.com/bid/96540 - https://github.com/netty/netty/pull/5364 - https://wiki.opendaylight.org/view/Security_Advisories - http://n
bid/96540 - https://github.com/netty/netty/pull/5364 - https://wiki.opendaylight.org/view/Security_Advisories - http://netty.io/news/2016/06/07/4-0-37-Final.html - https://bugzilla.redhat.com/show_bug.cgi?id=1343616 - https://lists.apache.org/thread.html/afaa5860e3a6d327eb96c3d82cbd2f5996de815a16854ed1ad310144%40%3Ccommits.cassandra.apache.org%3E
CVE ID: CVE-2016-4971 State: PUBLISHED Published: 2016-06-30T17:00:00 Last Updated: 2024-08-06T00:46:40.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004.html - https://security.gentoo.org/glsa/201610-11 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00043.html - https://www.exploit-db.com/exploits/40064/ - https://bugzilla.redhat.com/show_bug.cgi?id=1343666 - http://www.oracle.com/technetwork/topics/security/bullet