Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
4.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - https://www.openssl.org/news/secadv/20160301.txt - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - https://security.gentoo.org/glsa/201603-15 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/
use.org/opensuse-security-announce/2016-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-0705 State: PUBLISHED Published: 2016-03-03T00:00:00 Last Updated: 2024-08-05T22:30:04.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085 - http:/
16-March/178358.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085 - http://source.android.com/security/bulletin/2016-05-01.html - https://access.redhat.com/errata/RHSA-2018:2713 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html - http://marc.info/?l=bugtraq&m=146108058503441&w=2 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306
c/kb/docDisplay?docId=emr_na-c05301946 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c051
ity-announce/2016-03/msg00003.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617 - http://marc.info/?l=bugtraq&m=145889460330120&w=2 - http://marc.info/?l=bugtraq&m=145983526810210&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - https://access.redhat.com/errata/RHSA-2018:2575 - http://www.ubuntu.com/usn/USN-2914-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org
a-c05150736 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404 - http://openssl.org/news/secadv/20160301.txt - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb
om/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://access.redhat.com/errata/RHSA-2018:2568 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441 - http://www.debian.org/security/2016/dsa-3500 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - https://w
&docId=emr_na-hpesbhf03741en_us - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - https://www.openssl.org/news/secadv/20160301.txt - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://security.gentoo.org/glsa/201603-15 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - https://h20566.www2.hpe.com/port
e-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990 - http://www.securityfocus.com/bid/83754 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-0706 State: PUBLISHED Published: 2016-02-25T01:00:00 Last Updated: 2024-08-05T22:30:03.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hp
application. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http://svn.apache.org/viewvc?view=revision&revision=1722800 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://security.gentoo.org/glsa/201705-09 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html - http://tomcat.apache.org/security-9.html - http://www.ubuntu.com/usn/USN-3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - http://rhn.redhat.com/er
m/usn/USN-3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - http://rhn.redhat.com/errata/RHSA-2016-2045.html - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://marc.info/?l=bugtraq&m=145974991225029&w=2 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://svn.apache.org/viewvc?view=revision&revision=1722802 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://tomcat.apache.org/security-8.html - https://access.redhat.com/errata/RHSA-2016:1087 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/security-adv
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securitytracker.com/id/1035069 - https://bto.bluecoat.com/security-advisory/sa118 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 - http://rhn.redhat.com/errata/RHSA-2016-2807.html - https://access.redhat.com/errata/RHSA-2016:1088 - https://security.netapp.com/advisory/ntap-20180531-0001/ - http://tomcat.apache.org/security-6.html - http://rhn.redhat.com/errata/RHSA-2016-2808.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html - http://www.securityfocus.com/bi
2808.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html - http://www.securityfocus.com/bid/83324 - http://rhn.redhat.com/errata/RHSA-2016-2599.html - http://www.debian.org/security/2016/dsa-3609 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html - http://seclists.org/bugtraq/2016/Feb/144 - http://svn.apache.org/viewvc?view=revision&revision=1722799 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - http://www.debian.org/security/2016/dsa-3552 - http://svn.apache.org/viewvc?view=revision&revision=1722801 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662
w=revision&revision=1722801 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9
4de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2016-0707 State: PUBLISHED Published: 2016-05-18T14:00:00 Last Updated: 2024-08-05T22:30:03.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.1.2
CVE ID: CVE-2016-0708 State: PUBLISHED Published: 2018-07-11T20:00:00 Last Updated: 2024-08-05T22:30:03.631Z Vendors: Cloud Foundry Products: Cloud Foundry Problem Types: Information disclosure Description: Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables and bound service details. For applications to be vulnerable, they must have been staged using automatic buildpack detection, passed through the Java Buildpack detection script, and allow the serving of static content from within the deployed artifact. The default Apache Tomcat configuration in the affected java bu
ing of static content from within the deployed artifact. The default Apache Tomcat configuration in the affected java buildpack versions for some basic web application archive (WAR) packaged applications are vulnerable to this issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2016-0708/
CVE ID: CVE-2016-0709 State: PUBLISHED Published: 2016-04-11T14:00:00 Last Updated: 2024-08-05T22:30:03.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. (dot dot) in a ZIP archive entry, as demonstrated by "../../webapps/x.jsp." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39643/ - https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0709 - https://mail-archives.apa
/exploits/39643/ - https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0709 - https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C281D02D0-6A03-4421-9D86-E73B001C8677%40bluesunrise.com%3E - http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and - http://www.rapid7.com/db/modules/exploit/multi/http/apache_jetspeed_file_upload - http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html
CVE ID: CVE-2016-0710 State: PUBLISHED Published: 2016-04-11T14:00:00 Last Updated: 2024-08-05T22:30:03.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39643/ - https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C046318A1-226E-453F-9394-B84F1A33E6A4%40bluesunrise.com%3E - http://haxx.ml/post/140552592371/remote-code-execution-i
/%3C046318A1-226E-453F-9394-B84F1A33E6A4%40bluesunrise.com%3E - http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and - http://www.rapid7.com/db/modules/exploit/multi/http/apache_jetspeed_file_upload - http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html - https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0710
CVE ID: CVE-2016-0711 State: PUBLISHED Published: 2016-04-11T14:00:00 Last Updated: 2024-08-05T22:30:04.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C73AC0763-D44B-4BDF-867C-05AD4674A62F%40bluesunrise.com%3E - https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0711
CVE ID: CVE-2016-0712 State: PUBLISHED Published: 2016-04-11T14:00:00 Last Updated: 2024-08-05T22:30:03.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal. Additional Analyst Notes: - CVE Program Container: References: - https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0712 - https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9%40bluesunrise.com%3E
CVE ID: CVE-2016-0713 State: PUBLISHED Published: 2017-08-31T14:00:00 Last Updated: 2024-08-05T22:30:03.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests. Additional Analyst Notes: - CVE Program Container: References: - https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/ - https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229
CVE ID: CVE-2016-0714 State: PUBLISHED Published: 2016-02-25T01:00:00 Last Updated: 2024-08-05T22:30:03.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http
Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://security.gentoo.org/glsa/201705-09 - http://svn.apache.org/viewvc?view=revision&revision=1726196 - http://seclists.org/bugtraq/2016/Feb/145 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html - http://tomcat.apache.org/security-9.html - http://www.ubuntu.com/usn/USN-3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - http://rhn.redhat.com/errata/RHSA-
3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - http://rhn.redhat.com/errata/RHSA-2016-2045.html - http://svn.apache.org/viewvc?view=revision&revision=1725263 - http://www.debian.org/security/2016/dsa-3530 - http://svn.apache.org/viewvc?view=revision&revision=1726923 - http://svn.apache.org/viewvc?view=revision&revision=1727166 - http://svn.apache.org/viewvc?view=revision&revision=1727034 - http://tomcat.apache.org/security-7.html - http://svn.apache.org/viewvc?view=revision&revision=1725914 - http://marc.info/?l=bugtraq&m=145974991225029&w=2 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id
29&w=2 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1037640 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://tomcat.apache.org/security-8.html - https://access.redhat.com/errata/RHSA-2016:1087 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securitytracker.com/id/1035069 - https://bto.bluecoat.com/security-advisory/sa118 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 - http://rhn.redhat.com/errata/RHSA-2016-2807.html - https://access.redhat.com/err
/kb/docDisplay?docId=emr_na-c05150442 - http://rhn.redhat.com/errata/RHSA-2016-2807.html - https://access.redhat.com/errata/RHSA-2016:1088 - https://security.netapp.com/advisory/ntap-20180531-0001/ - http://tomcat.apache.org/security-6.html - http://rhn.redhat.com/errata/RHSA-2016-2808.html - http://svn.apache.org/viewvc?view=revision&revision=1726203 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html - http://svn.apache.org/viewvc?view=revision&revision=1727182 - http://www.securityfocus.com/bid/83327 - http://rhn.redhat.com/errata/RHSA-2016-2599.html - http://www.debian.org/security/2016/dsa-3609 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00
html - http://www.debian.org/security/2016/dsa-3609 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - http://www.debian.org/security/2016/dsa-3552 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c
bc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2016-0715 State: PUBLISHED Published: 2018-09-11T17:00:00Z Last Updated: 2024-09-16T16:48:30.435Z Vendors: Pivotal Products: Pivotal Cloud Foundry Elastic Runtime Problem Types: CWE-200 Description: Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigation configuration instructions provided as part of CVE-2016-0708 were incomplete and could leave PHP Buildpack, Staticfile Buildpack and potentially other custom Buildpack applications vulnerable to remote information disclosure. Affected applications use automated buildpack detection, serve
applications vulnerable to remote information disclosure. Affected applications use automated buildpack detection, serve files directly from the root of the application and have a buildpack that matched after the Java Buildpack in the system buildpack priority when Java Buildpack versions 2.0 through 3.4 were present. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-0715
CVE ID: CVE-2016-0716 State: REJECTED Published: 2016-02-18T15:00:00 Last Updated: 2016-02-18T13:57:01 Description: No description available.
CVE ID: CVE-2016-0717 State: REJECTED Published: 2016-02-18T15:00:00 Last Updated: 2016-02-18T13:57:01 Description: No description available.
CVE ID: CVE-2016-0718 State: PUBLISHED Published: 2016-05-26T16:00:00 Last Updated: 2024-08-05T22:30:03.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2824.html - https://www.tenable.com/security/tns-2016-20 - http://www.securitytracker.com/id/1037705 - http://www.securitytracker.com/id/1036415 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.ubuntu.com/us