Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
focus.com/archive/1/archive/1/540341/100/0/threaded - http://www.ubuntu.com/usn/USN-3179-1 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en - https://access.redhat.com/errata/RHSA-2019:1245 - https://access.redhat.com/errata/RHSA-2019:2859 - https://access.redhat.com/errata/RHSA-2020:0451 - https://kc.mcafee.com/corporate/index?page=content&id=SB10310 - https://www.oracle.com/security-alerts/cpuapr2020.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/sec
cpuapr2018-3678067.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpujan2020.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://sweet32.info/ - http://www.splunk.com/view/SP-CAAAPUE - https://bugzilla.redhat.com/show_bug.cgi?id=1369383 - https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/ - http://www.oracle.com/technetwork/top
log.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/ - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - https://access.redhat.com/articles/2548661 - https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue - http://www.splunk.com/view/SP-CAAAPSV - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633 - https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ - https://www.sigsac.org/ccs/CCS2016/accepted-papers/ - http://www-01.ibm.com/support/docview.wss?uid=swg21991482 - https://www.openssl.org/blog/blog/2016/
6/accepted-papers/ - http://www-01.ibm.com/support/docview.wss?uid=swg21991482 - https://www.openssl.org/blog/blog/2016/08/24/sweet32/ - https://access.redhat.com/security/cve/cve-2016-2183 - https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/ - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/ - https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008 - http://www-01.ibm.com/supp
s://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008 - http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-2184 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:17:50.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://seclists.org/bugtraq/2016/Mar/89 - ht
ttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://seclists.org/bugtraq/2016/Mar/89 - http://www.securityfocus.com/bid/84340 - http://www.ubuntu.com/usn/USN-2970-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1317012 - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2968-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f886ca12765d20124bd06291c82951fd49a33be - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://lists
16-07/msg00005.html - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 - http://www.ubuntu.com/usn/USN-2968-2 - https://github.com/torvalds/linux/commit/0f886ca12765d20124bd06291c82951fd49a33be - https://source.android.com/security/bulletin/2016-11-01.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.htm
ndroid.com/security/bulletin/2016-11-01.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://seclists.org/bugtraq/2016/Mar/88 - http://seclists.org/bugtraq/2016/Mar/102 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - https://www.exploit-db.com/exploits/39555/
CVE ID: CVE-2016-2185 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:24:48.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.securityfocus.com/bid/84341 - https://bugzilla.redhat.com/show_bug.cgi?
rity-announce/2016-06/msg00054.html - http://www.securityfocus.com/bid/84341 - https://bugzilla.redhat.com/show_bug.cgi?id=1283363 - https://bugzilla.redhat.com/show_bug.cgi?id=1317014 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-2970-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1283362 - http://seclists.org/bugtraq/2016/Mar/90 - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2968-1 - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/op
/USN-2968-1 - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - https://github.com/torvalds/linux/commit/950336ba3e4a1ffd2c
nsuse.org/opensuse-security-announce/2016-08/msg00038.html - https://github.com/torvalds/linux/commit/950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 - http://seclists.org/bugtraq/2016/Mar/116
CVE ID: CVE-2016-2186 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:24:48.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c6ba4567116
-announce/2016-06/msg00054.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c6ba456711687b794dcf285856fc14e2c76074f - http://www.securityfocus.com/bid/84337 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-2970-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1317015 - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2968-1 - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://seclists.org/bugtraq/2016/Mar/117 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubun
sg00005.html - http://seclists.org/bugtraq/2016/Mar/117 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://seclists.org/bugtraq/2016/Mar/85 - https://github.com/torvalds/linux/commit/9c6ba456711687b794dcf285856fc14e2c76074f - http://www.kernel.org/pub/linux/kernel/v4.x/
github.com/torvalds/linux/commit/9c6ba456711687b794dcf285856fc14e2c76074f - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1
CVE ID: CVE-2016-2187 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:24:48.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3006-1 - http://www.ubuntu.com/usn/USN-3004-1 - http://www.ubuntu.com/usn/USN-3001-1 - https://github.com/torvalds/linux/commit/162f98dea487206d9ab79fc12ed64700667a894d - http://w
ubuntu.com/usn/USN-3001-1 - https://github.com/torvalds/linux/commit/162f98dea487206d9ab79fc12ed64700667a894d - http://www.ubuntu.com/usn/USN-3005-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://www.securityfocus.com/bid/85425 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=162f98dea487206d9ab79fc12ed64700667a894d - http://www.ubuntu.com/usn/USN-2997-1 - http://www.ubuntu.com/usn/USN-3000-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3002-1 - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2989
2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2989-1 - http://www.ubuntu.com/usn/USN-3007-1 - http://www.ubuntu.com/usn/USN-3003-1 - http://www.ubuntu.com/usn/USN-2998-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1317017
CVE ID: CVE-2016-2188 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:24:48.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - https://www.exploit-db.com/exploits/39556/ - http://seclists.org/bugtraq/2016/Mar/87 - h
nnounce/2016-06/msg00054.html - https://www.exploit-db.com/exploits/39556/ - http://seclists.org/bugtraq/2016/Mar/87 - https://github.com/torvalds/linux/commit/4ec0ef3a82125efc36173062a50624550a900ae0 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-2970-1 - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2968-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1317018 - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-2971-1 - http://lists.opensuse.org/opensuse-security-announce/20
e/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-2971-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ec0ef3a82125efc36173062a50624550a900ae0 - http://seclists.org/bugtraq/2016/Mar/118
CVE ID: CVE-2016-2189 State: REJECTED Published: 2016-05-17T15:00:00 Last Updated: 2016-05-17T14:57:01 Description: No description available.
CVE ID: CVE-2016-2190 State: PUBLISHED Published: 2016-05-22T20:00:00 Last Updated: 2024-08-05T23:24:48.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651 - https://moodle.org/mod/forum/discuss.php?d=330181 - http://www.securitytracker.com/id/1035333
CVE ID: CVE-2016-2191 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:24:48.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/optipng/bugs/59/ - http://www.openwall.com/lists/oss-security/2016/04/04/2 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00065.html - http://www.debian.org/security/2016/dsa-3546 - http://www.ubuntu.com/usn/USN-2951-1
suse-updates/2016-04/msg00065.html - http://www.debian.org/security/2016/dsa-3546 - http://www.ubuntu.com/usn/USN-2951-1 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00061.html - http://www.securityfocus.com/archive/1/537972/100/0/threaded - http://seclists.org/fulldisclosure/2016/Apr/15 - https://security.gentoo.org/glsa/201608-01 - http://packetstormsecurity.com/files/136553/Optipng-Invalid-Write.html
CVE ID: CVE-2016-2192 State: PUBLISHED Published: 2017-06-06T18:00:00 Last Updated: 2024-08-05T23:24:48.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own. Additional Analyst Notes: - CVE Program Container: References: - https://tada.github.io/pljava/releasenotes.html
CVE ID: CVE-2016-2193 State: PUBLISHED Published: 2016-04-11T15:00:00 Last Updated: 2024-08-05T23:24:48.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/current/static/release-9-5-2.html - http://www.postgresql.org/about/news/1656/ - http://www.securitytracker.com/id/1035468 - http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=db69
- http://www.securitytracker.com/id/1035468 - http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=db69e58a0642ef7fa46d62f6c4cf2460c3a1b41b
CVE ID: CVE-2016-2194 State: PUBLISHED Published: 2016-05-13T14:00:00 Last Updated: 2024-08-05T23:24:48.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (infinite loop) via unspecified input to the OS2ECP function, related to a composite modulus. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=botan-devel&m=145435148602911&w=2 - http://marc.info/?l=botan-devel&m=145449001708138&w=2 - http://www.debian.org/security/2016/dsa-3565 - https://security.gentoo.org/glsa/201612-38 - http://botan.randombit.net/security.html
CVE ID: CVE-2016-2195 State: PUBLISHED Published: 2016-05-13T14:00:00 Last Updated: 2024-08-05T23:24:48.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=botan-devel&m=145435148602911&w=2 - http://www.debian.org/security/2016/dsa-3565 - https://security.gentoo.org/glsa/201612-38 - http://botan.randombit.net/security.html
CVE ID: CVE-2016-2196 State: PUBLISHED Published: 2016-05-13T14:00:00 Last Updated: 2024-08-05T23:24:48.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (memory overwrite and crash) or execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=botan-devel&m=145435148602911&w=2 - http://botan.randombit.net/security.html
CVE ID: CVE-2016-2197 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-05T23:24:48.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Frame Information Structure (FIS) and Command List Block (CLB) entries. A privileged user inside guest could use this flaw to crash the QEMU process instance resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82235 - http://www.openwall.com/lists/oss-security/2016/01/29/2 - https://security.gentoo.org/glsa/201604-01 -
.com/bid/82235 - http://www.openwall.com/lists/oss-security/2016/01/29/2 - https://security.gentoo.org/glsa/201604-01 - http://www.openwall.com/lists/oss-security/2016/01/30/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1302057 - https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg05742.html
CVE ID: CVE-2016-2198 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-05T23:24:48.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/30/2 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_
ty/2016/01/30/2 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1301643 - http://www.openwall.com/lists/oss-security/2016/01/29/6 - https://security.gentoo.org/glsa/201604-01 - https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg05899.html
CVE ID: CVE-2016-2199 State: PUBLISHED Published: 2016-02-01T21:00:00Z Last Updated: 2024-09-16T17:58:29.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager (MVM) before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10147
CVE ID: CVE-2016-2200 State: PUBLISHED Published: 2016-02-08T16:00:00 Last Updated: 2024-08-05T23:24:48.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83106 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdf - http://www.securitytracker.com/id/1034954 - https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf
CVE ID: CVE-2016-2201 State: PUBLISHED Published: 2016-02-08T16:00:00 Last Updated: 2024-08-05T23:24:48.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdf - http://www.securitytracker.com/id/1034954 - http://www.securityfocus.com/bid/83110 - https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf
CVE ID: CVE-2016-2202 State: PUBLISHED Published: 2016-04-20T17:00:00 Last Updated: 2024-08-05T23:24:48.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160407_00 - http://www.securityfocus.com/bid/85778
CVE ID: CVE-2016-2203 State: PUBLISHED Published: 2016-04-22T18:00:00 Last Updated: 2024-08-05T23:24:48.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160418_00 - http://packetstormsecurity.com/files/136758/Symantec-Brightmail-10.6.0-7-LDAP-Credential-Grabber.html - http://www.securityfocus.com/bid/86137