Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2006 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T23:17:50.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-246 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988 - http://www.securitytracker.com/id/1035631
CVE ID: CVE-2016-2007 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T23:17:50.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-247 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988 - http://www.securitytracker.com/id/1035631
CVE ID: CVE-2016-2008 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-05T23:17:50.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988 - http://www.securitytracker.com/id/1035631
CVE ID: CVE-2016-2009 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T23:17:50.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564
CVE ID: CVE-2016-2010 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T23:17:50.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035767 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564
CVE ID: CVE-2016-2011 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T23:17:49.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035767 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564
CVE ID: CVE-2016-2012 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T23:17:50.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035767 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564
CVE ID: CVE-2016-2013 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T23:17:50.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035767 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564
CVE ID: CVE-2016-2014 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T23:17:50.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035767 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564
CVE ID: CVE-2016-2015 State: PUBLISHED Published: 2016-05-14T15:00:00 Last Updated: 2024-08-05T23:17:49.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://www.securitytracker.com/id/1035775
CVE ID: CVE-2016-2016 State: PUBLISHED Published: 2016-05-14T15:00:00 Last Updated: 2024-08-05T23:17:49.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user: entries, which allows local users to bypass intended access restrictions by leveraging the configuration of a parent directory. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/
irectory. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121749 - http://www.securitytracker.com/id/1035816
CVE ID: CVE-2016-2017 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/s
/h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
CVE ID: CVE-2016-2018 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
CVE ID: CVE-2016-2019 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/s
CVE ID: CVE-2016-2020 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:49.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/s
CVE ID: CVE-2016-2021 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2022, and CVE-2016-2030. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/s
CVE ID: CVE-2016-2022 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:49.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2030. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/s
CVE ID: CVE-2016-2023 State: PUBLISHED Published: 2016-05-30T01:00:00 Last Updated: 2024-08-05T23:17:50.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141083
CVE ID: CVE-2016-2024 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Insight Control before 7.5.1 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05158380 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958
CVE ID: CVE-2016-2025 State: PUBLISHED Published: 2016-05-30T01:00:00 Last Updated: 2024-08-05T23:17:49.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149290 - http://www.securitytracker.com/id/1035954
CVE ID: CVE-2016-2026 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2027. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
CVE ID: CVE-2016-2027 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2026. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
CVE ID: CVE-2016-2028 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:49.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4357. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
CVE ID: CVE-2016-2029 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
CVE ID: CVE-2016-2030 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2022. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/s
CVE ID: CVE-2016-2031 State: PUBLISHED Published: 2020-01-31T19:33:12 Last Updated: 2024-08-05T23:17:49.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html - http://seclists.org/fulldisc
urity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html - http://seclists.org/fulldisclosure/2016/May/19 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txt - https://www.securityfocus.com/bid/90207 - https://cert-portal.siemens.com/productcert/pdf/ssa-431802.pdf
CVE ID: CVE-2016-2032 State: PUBLISHED Published: 2020-01-31T19:53:50 Last Updated: 2024-08-05T23:17:49.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain sensitive information. This interface listens on TCP port 15672 and 55672 Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html - http://seclists.org/fulldisclosure/2016/May/19 - http://www.arubanetworks.com/as
nsecure-Transport-Tons-Of-Issues.html - http://seclists.org/fulldisclosure/2016/May/19 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-005.txt - https://www.google.com/about/appsecurity/research/
CVE ID: CVE-2016-2033 State: REJECTED Published: 2020-01-31T20:12:10 Last Updated: 2020-02-05T14:28:44 Description: No description available.
CVE ID: CVE-2016-2034 State: PUBLISHED Published: 2017-06-08T18:00:00 Last Updated: 2024-08-05T23:17:50.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-009.txt
CVE ID: CVE-2016-2035 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2036 State: PUBLISHED Published: 2017-04-13T16:00:00 Last Updated: 2024-08-05T23:17:50.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to trigger a NULL pointer dereference via a "GET HTTP/1.1" request, aka SVE-2016-5036. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0001
CVE ID: CVE-2016-2037 State: PUBLISHED Published: 2016-02-22T15:05:00 Last Updated: 2024-08-05T23:17:50.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/19/4 - http://www.securitytracker.com/id/1035067 - http://www.debian.org/security/2016/dsa-3483 - http://www.openwall.com/lists/oss-security/2016/01/22/4 - http://www.ubuntu.com/usn/USN-2906-1 - http://www.securityfocus.com/bid/82293
CVE ID: CVE-2016-2038 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:17:50.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/f83b52737e321005959497d8e8f59f8aaedc9048 - https://github.com/phpmyadmin/phpmyadmin/commit/85ccdbb5b9c6c7a9830e5cb468662837a59a7aa3 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - https://g
/85ccdbb5b9c6c7a9830e5cb468662837a59a7aa3 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - https://github.com/phpmyadmin/phpmyadmin/commit/447c88f4884fe30a25d38c331c31d820a19f8c93 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html - https://github.com/phpmyadmin/phpmyadmin/commit/d4b9c22c1f8465bda5b6a83dc7e2cf59c3fe44e1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html - http://www.phpmyadmin.net/home_page/security/PMASA-2016-1.php - https://github.com/phpmyadmin/phpmyadmin/commit/76b10187c38634a29d6780f99f6dcd796191073b - https://githu
SA-2016-1.php - https://github.com/phpmyadmin/phpmyadmin/commit/76b10187c38634a29d6780f99f6dcd796191073b - https://github.com/phpmyadmin/phpmyadmin/commit/5aee5035646c4fc617564cb0d3d58c0435d64d81
CVE ID: CVE-2016-2039 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:17:49.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass intended access restrictions by predicting a value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/f20970d32c3dfdf82aef7b6c244da1f769043813 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - http://www.debian.org/security/2016/dsa-3627 - http://lists.o
ists.opensuse.org/opensuse-updates/2016-02/msg00049.html - http://www.debian.org/security/2016/dsa-3627 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html - http://www.phpmyadmin.net/home_page/security/PMASA-2016-2.php - https://github.com/phpmyadmin/phpmyadmin/commit/cb7748ac9cffcd1cd0f3081499cd4aafa9d1065e
CVE ID: CVE-2016-2040 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:17:50.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) table name, (2) SET value, (3) search query, or (4) hostname in a Location header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - https://github.com/phpmyadmin/phpmyadmin/commit/75a55824012406a08c4debf5ddb7ae41c32a7dbc - https://
6-02/msg00049.html - https://github.com/phpmyadmin/phpmyadmin/commit/75a55824012406a08c4debf5ddb7ae41c32a7dbc - https://github.com/phpmyadmin/phpmyadmin/commit/aca42efa01917cc0fe8cfdb2927a6399ca1742f2 - http://www.debian.org/security/2016/dsa-3627 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html - http://www.phpmyadmin.net/home_page/security/PMASA-2016-3.php - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html - https://github.com/phpmyadmin/phpmyadmin/commit/edffb52884b09562490081c3b8666ef46c296418
CVE ID: CVE-2016-2041 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:17:49.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier for remote attackers to bypass intended access restrictions by measuring time differences. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - http://www.debian.org/security/2016/dsa-3627 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html
.html - http://www.debian.org/security/2016/dsa-3627 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html - http://www.phpmyadmin.net/home_page/security/PMASA-2016-5.php - https://github.com/phpmyadmin/phpmyadmin/commit/ec0e88e37ef30a66eada1c072953f4ec385a3e49 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html