Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4800 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T00:39:26.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes. Additional Analyst Notes: - CVE Program Container: References: - http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00092.html - http://www.securityfocus.com/bid/90945 - https://www.oracle.com/security-alerts/cpuoct2020.html - http://www.ocert.org/advisories/oce
curityfocus.com/bid/90945 - https://www.oracle.com/security-alerts/cpuoct2020.html - http://www.ocert.org/advisories/ocert-2016-001.html - https://security.netapp.com/advisory/ntap-20190307-0006/ - http://www.zerodayinitiative.com/advisories/ZDI-16-362
CVE ID: CVE-2016-4802 State: PUBLISHED Published: 2016-06-24T17:00:00 Last Updated: 2024-08-06T00:39:26.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) security.dll, (2) secur32.dll, or (3) ws2_32.dll in the application or current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036008 - https://curl.haxx.se/docs/adv_20160530.html - http://www.securityfocus.com/bid/90997
CVE ID: CVE-2016-4803 State: PUBLISHED Published: 2016-06-30T17:00:00 Last Updated: 2024-08-06T00:39:26.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject. Additional Analyst Notes: - CVE Program Container: References: - https://dotcms.com/docs/latest/change-log#release-3.3.2 - https://security.elarlang.eu/cve-2016-4803-dotcms-email-header-injection-vulnerability-full-disclosure.html - http://www.securityfocus.com/bid/91529 - http://seclists.org/fulldisclosure/2016/May/69
CVE ID: CVE-2016-4804 State: PUBLISHED Published: 2016-06-03T14:00:00 Last Updated: 2024-08-06T00:39:26.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html - https://github.com/dosfstools/dosfstools/issues/25 - https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-a
.com/dosfstools/dosfstools/issues/25 - https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html - http://www.ubuntu.com/usn/USN-2986-1 - https://github.com/dosfstools/dosfstools/issues/26 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html - http://www.securityfocus.com/bid/90311 - https://github.com/dosfstools/dosfstools/commit/e8eff147e9da1185f9afd5b25948153a3b97cf52 - https://lists.debian.org/debian-lts-announce/2020/05/msg00028.html
CVE ID: CVE-2016-4805 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:39:26.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.oracle.com/technetwork/topics/sec
ttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.ubuntu.com/usn/USN-3021-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1f461dcdd296eecedaffffc6bae2bfa90bd7eb89 - https://github.com/torvalds/linux/commit/1f461dcdd296eecedaffffc6bae2bfa90bd7eb89 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.debian.org/security/2016/dsa-3607 - http://www.securityt
g/opensuse-security-announce/2016-06/msg00044.html - http://www.debian.org/security/2016/dsa-3607 - http://www.securitytracker.com/id/1036763 - http://www.openwall.com/lists/oss-security/2016/05/15/2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-3021-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2 - https://bugzilla.redhat.com/show_bug.cgi?id=1335803 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.securityfocus.com/bid/90605 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg
sg00044.html - http://www.securityfocus.com/bid/90605 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-4806 State: PUBLISHED Published: 2017-01-11T16:00:00 Last Updated: 2024-08-06T00:39:26.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39821/ - http://packetstormsecurity.com/files/137070/Web2py-2.14.5-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2016-4807 State: PUBLISHED Published: 2017-01-11T16:00:00 Last Updated: 2024-08-06T00:39:26.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39821/ - http://packetstormsecurity.com/files/137070/Web2py-2.14.5-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2016-4808 State: PUBLISHED Published: 2017-01-11T16:00:00 Last Updated: 2024-08-06T00:39:26.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just by sending a URL to victim. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39821/ - http://packetstormsecurity.com/files/137070/Web2py-2.14.5-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2016-4809 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:39:26.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libarchive/libarchive/commit/fd7e0c02 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://github.com/libarchive/libarchive/issues/705 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-309
github.com/libarchive/libarchive/issues/705 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/91813 - https://bugzilla.redhat.com/show_bug.cgi?id=1347084 - http://rhn.redhat.com/errata/RHSA-2016-1850.html - https://security.gentoo.org/glsa/201701-03 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2016-4810 State: PUBLISHED Published: 2016-06-01T22:00:00 Last Updated: 2024-08-06T00:39:26.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1), and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Controller via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036021 - http://support.citrix.com/article/CTX213045
CVE ID: CVE-2016-4811 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-06T00:39:26.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN46888319/278948/index.html - https://play.google.com/store/apps/details?id=com.nttbp.jfw - http://jvn.jp/en/jp/JVN46888319/index.html - https://itunes.apple.com/app/japan-connected-free-wi-fi/id810838196 - http://jvndb.jvn.jp/jvndb/JVN
6888319/index.html - https://itunes.apple.com/app/japan-connected-free-wi-fi/id810838196 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000076
CVE ID: CVE-2016-4812 State: PUBLISHED Published: 2016-06-04T16:00:00 Last Updated: 2024-08-06T00:39:26.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN26026353/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000071 - https://srd.wordpress.org/plugins/markdown-on-save-improved/changelog/
CVE ID: CVE-2016-4813 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-06T00:39:26.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain privileges by creating a SYSTEM_ADMIN account. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN00460236/index.html - http://www.netcommons.org/muer4mz6s-6669 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000075
CVE ID: CVE-2016-4814 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-06T00:39:26.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan (aka GSI) Old_GSI_Maps before January 2015 on Windows allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000090 - http://www.gsi.go.jp/johofukyu/johofukyu40062.html - http://jvn.jp/en/jp/JVN13794955/index.html
CVE ID: CVE-2016-4815 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-06T00:39:26.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN81698369/index.html - http://buffalo.jp/support_s/s20160527b.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000086
CVE ID: CVE-2016-4816 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-06T00:39:26.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000087 - http://jvn.jp/en/jp/JVN75813272/index.html - http://buffalo.jp/support_s/s20160527a.html
CVE ID: CVE-2016-4817 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-06T00:39:26.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/http2/connection.c in H2O before 1.7.3 and 2.x before 2.0.0-beta5 mishandles HTTP/2 disconnection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h2o/h2o/commit/1c0808d580da09fdec5a9a74ff09e103ea058dd4 - http://jvn.jp/en/jp/JVN87859762/index.html - https://github.com/h2o/h2o/pull/920 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000091
CVE ID: CVE-2016-4818 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-06T00:39:26.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.gaitamejapan.com/support/news/2016/2016053001/ - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000092.html - http://jvn.jp/en/jp/JVN40898764/index.html - http://fx.dmm.com/information/press/2016/2016053001/ - https://jvn.jp/en/jp/JVN40898764/995849/index.html
CVE ID: CVE-2016-4819 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-06T00:39:26.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The printfDx function in Takumi Yamada DX Library for Borland C++ 3.13f through 3.16b, DX Library for Gnu C++ 3.13f through 3.16b, and DX Library for Visual C++ 3.13f through 3.16b allows remote attackers to execute arbitrary code via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN15205734/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000099 - http://dxlib.o.oo7.jp/dxvulnerability.html
CVE ID: CVE-2016-4820 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-06T00:39:26.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000100 - http://www.iodata.jp/support/information/2016/etx-r/ - http://jvn.jp/en/jp/JVN61317238/index.html
CVE ID: CVE-2016-4821 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-06T00:39:26.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000101 - http://jvn.jp/en/jp/JVN96052093/index.html - http://www.iodata.jp/support/information/2016/etx-r/
CVE ID: CVE-2016-4822 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-06T00:39:26.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN76653039/index.html - http://corega.jp/support/security/20160622_wlbargl.htm - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000107
CVE ID: CVE-2016-4823 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-06T00:39:26.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000108 - http://corega.jp/support/security/20160622_wlbaragm.htm - http://jvn.jp/en/jp/JVN24409899/index.html
CVE ID: CVE-2016-4824 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-06T00:39:26.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000109 - http://jvn.jp/en/jp/JVN75028871/index.html - http://corega.jp/support/security/20160622_wlr300gnv.htm
CVE ID: CVE-2016-4825 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-06T00:39:26.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000115 - http://www.welcart.com/community/archives/78977 - http://jvn.jp/en/jp/JVN47363774/index.html
CVE ID: CVE-2016-4826 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-06T00:39:26.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4827. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN95082904/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000116 - http://www.welcart.com/community/archives/78977
CVE ID: CVE-2016-4827 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-06T00:39:26.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000117 - http://www.welcart.com/community/archives/78977 - http://jvn.jp/en/jp/JVN55826471/index.html
CVE ID: CVE-2016-4828 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-06T00:39:26.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN61578437/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000118 - http://www.welcart.com/community/archives/78977
CVE ID: CVE-2016-4829 State: PUBLISHED Published: 2017-04-21T14:00:00 Last Updated: 2024-08-06T00:39:26.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMM Movie Player App for Android before 1.2.1, and DMM Movie Player App for iPhone/iPad before 2.1.3 does not verify SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000120.html - http://jvn.jp/en/jp/JVN39594409/index.html
CVE ID: CVE-2016-4830 State: PUBLISHED Published: 2017-04-21T14:00:00 Last Updated: 2024-08-06T00:39:26.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sushiro App for iOS 2.1.16 and earlier and Sushiro App for Android 2.1.16.1 and earlier do not verify SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000122.html - http://jvn.jp/en/jp/JVN30260727/index.html - http://www.securityfocus.com/bid/91490
CVE ID: CVE-2016-4831 State: PUBLISHED Published: 2016-07-12T01:00:00 Last Updated: 2024-08-06T00:39:26.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000123 - http://jvn.jp/en/jp/JVN51565015/index.html - http://www.securityfocus.com/bid/91671 - http://linecorp.com/ja/security/article/61
CVE ID: CVE-2016-4832 State: PUBLISHED Published: 2017-04-21T14:00:00 Last Updated: 2024-08-06T00:39:26.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAON "Service Application" for Android 1.4.1 and earlier does not verify SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000124.html - http://www.securityfocus.com/bid/91789 - http://jvn.jp/en/jp/JVN68364327/index.html
CVE ID: CVE-2016-4833 State: PUBLISHED Published: 2016-08-03T01:00:00 Last Updated: 2024-08-06T00:39:26.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Nofollow Links plugin before 1.0.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92077 - https://wordpress.org/plugins/nofollow-links/changelog/ - https://wpvulndb.com/vulnerabilities/8580 - http://jvn.jp/en/jp/JVN13582657/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000125
CVE ID: CVE-2016-4834 State: PUBLISHED Published: 2016-08-01T01:00:00 Last Updated: 2024-08-06T00:39:26.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticated users to create or modify user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92076 - http://jvn.jp/en/jp/JVN01956993/index.html - http://code.vtiger.com/vtiger/vtigercrm/commit/7cdf9941197b4aa58114eafce3ce88fb418eb68c - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000126 - http://www.securitytracker.com/id/103
41197b4aa58114eafce3ce88fb418eb68c - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000126 - http://www.securitytracker.com/id/1036485
CVE ID: CVE-2016-4835 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4836 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4837 State: PUBLISHED Published: 2016-08-01T01:00:00 Last Updated: 2024-08-06T00:39:26.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000130 - http://www.securityfocus.com/bid/92090 - http://jvn.jp/en/jp/JVN40696431/index.html - http://www.ec-cube.net/products/detail.php?product_id=493