Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10005 State: PUBLISHED Published: 2016-12-19T06:55:00 Last Updated: 2024-08-06T03:07:31.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-16-035-sap-solman-user-accounts-dislosure/ - http://packetstormsecurity.com/files/140232/SAP-Solman-7.31-Information-Disclosure.html - http://www.securityfocus.com/bid/92949 - http://seclists.org/fulldisclosure/2016/Dec/69
CVE ID: CVE-2016-10006 State: PUBLISHED Published: 2016-12-24T18:17:00 Last Updated: 2024-08-06T03:07:31.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037532 - https://github.com/nahsra/antisamy/issues/2 - http://www.securityfocus.com/bid/95101
CVE ID: CVE-2016-10007 State: PUBLISHED Published: 2018-02-19T21:00:00 Last Updated: 2024-08-06T03:07:31.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the "Marketing > Forms" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the _EXT_FORM_HANDLER_orderBy parameter. Additional Analyst Notes: - CVE Program Container: References: - https://security.elarlang.eu/cve-2016-10007-and-cve-2016-10008-2-sql-injection-vulnerabilities-in-dotcms-blacklist-defence-bypass.html
CVE ID: CVE-2016-10008 State: PUBLISHED Published: 2018-02-19T21:00:00 Last Updated: 2024-08-06T03:07:31.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the _EXT_STRUCTURE_direction parameter. Additional Analyst Notes: - CVE Program Container: References: - https://security.elarlang.eu/cve-2016-10007-and-cve-2016-10008-2-sql-injection-vulnerabilities-in-dotcms-blacklist-defence-bypass.html
CVE ID: CVE-2016-10009 State: PUBLISHED Published: 2017-01-05T00:00:00.000Z Last Updated: 2025-02-13T16:27:14.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openbsd/src/commit/9476ce1dd37d3c3218d5640b74c34c65e5f4efe5 - https://www.exploit-db.com/exploits/40963/ - https://security.netapp.com/advisory/ntap-20171130-0002/ - http://www.securityfocus.com/bid/94968 - http://www.openwall.com/lists
ecurity.netapp.com/advisory/ntap-20171130-0002/ - http://www.securityfocus.com/bid/94968 - http://www.openwall.com/lists/oss-security/2016/12/19/2 - http://www.securitytracker.com/id/1037490 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc - https://usn.ubuntu.com/3538-1/ - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637 - https://access.redhat.com/errata/RHSA-2017:2029 - http://packetstormsecurity.com/files/140261/OpenSSH-Arbitrary-Library-Loading.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html -
les/140261/OpenSSH-Arbitrary-Library-Loading.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - https://www.openssh.com/txt/release-7.4 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1009 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf - http://www.openwall.com/lists/oss-security/2023/07/19/9 - http://seclists.org/fulldisclosure/2023/Jul/31 - http://www.openwall.com/lists/oss-security/2023/07/20/1 - http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html
CVE ID: CVE-2016-10010 State: PUBLISHED Published: 2017-01-05T00:00:00 Last Updated: 2024-08-06T03:07:32.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94972 - https://security.netapp.com/advisory/ntap-20171130-0002/ - http://www.openwall.com/lists/oss-security/2016/12/19/2 - http://www.securitytracker.com/id/1037490 - https://support.hpe.com/hpsc/doc/public/display?doc
-security/2016/12/19/2 - http://www.securitytracker.com/id/1037490 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us - https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637 - https://github.com/openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce - https://www.exploit-db.com/exploits/40962/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=1010 - http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html - https://www.openssh.com/txt/release-7.4 - https://cert-portal.siemens.com/productce
SH-Local-Privilege-Escalation.html - https://www.openssh.com/txt/release-7.4 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-10011 State: PUBLISHED Published: 2017-01-05T00:00:00 Last Updated: 2024-08-06T03:07:32.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20171130-0002/ - http://www.openwall.com/lists/oss-security/2016/12/19/2 - http://www.securitytracker.com/id/1037490 - https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b
y/2016/12/19/2 - http://www.securitytracker.com/id/1037490 - https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637 - https://access.redhat.com/errata/RHSA-2017:2029 - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - http://www.securityfocus.com/bid/94977 - https://www.openssh.com/txt/release-7.4 - https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-10012 State: PUBLISHED Published: 2017-01-05T00:00:00 Last Updated: 2024-08-06T03:07:31.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20171130-0002/ - http://www.openwall.com/lists/oss-security/2016/12/19/2 - http://www.
security.netapp.com/advisory/ntap-20171130-0002/ - http://www.openwall.com/lists/oss-security/2016/12/19/2 - http://www.securitytracker.com/id/1037490 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637 - https://access.redhat.com/errata/RHSA-2017:2029 - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - https://www.openssh.com/txt/release-7.4 - http://www.securityfocus.com/bid/94975 - https://github.com/openbsd/src/commit/3095060f479b86288e31c79ecbc5131a66bcd2f9 - https://support.f5.com/csp/article/K62201745?utm_source=f5suppor
d/src/commit/3095060f479b86288e31c79ecbc5131a66bcd2f9 - https://support.f5.com/csp/article/K62201745?utm_source=f5support&amp%3Butm_medium=RSS - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-10013 State: PUBLISHED Published: 2017-01-26T15:00:00 Last Updated: 2024-08-06T03:07:31.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94963 - http://www.securitytracker.com/id/1037491 - http://www.debian.org/security/2017/dsa-3847 - http://xenbits.xen.org/xsa/advisory-204.html
CVE ID: CVE-2016-10014 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10015 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10016 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10017 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10018 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10019 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10020 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10021 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10022 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10023 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-10024 State: PUBLISHED Published: 2017-01-26T15:00:00 Last Updated: 2024-08-06T03:07:31.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-56 - http://xenbits.xen.org/xsa/advisory-202.html - http://www.securityfocus.com/bid/95021 - http://www.debian.org/security/2017/dsa-3847 - http://www.securitytracker.com/id/1037517 - https://support.citrix.com/a
http://www.debian.org/security/2017/dsa-3847 - http://www.securitytracker.com/id/1037517 - https://support.citrix.com/article/CTX219378
CVE ID: CVE-2016-10025 State: PUBLISHED Published: 2017-01-26T15:00:00 Last Updated: 2024-08-06T03:07:32.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95026 - http://xenbits.xen.org/xsa/advisory-203.html - https://support.citrix.com/article/CTX219378 - http://www.securitytracker.com/id/1037518
CVE ID: CVE-2016-10026 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T03:07:31.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI interface enabled, which allows remote attackers to revert certain changes by leveraging permissions to change the page before the revision was made. Additional Analyst Notes: - CVE Program Container: References: - http://ikiwiki.info/bugs/rcs_revert_can_bypass_authorization_if_affected_files_were_renamed/ - https://ikiwiki.info/security/#index46h2 - http://www.debian.o
an_bypass_authorization_if_affected_files_were_renamed/ - https://ikiwiki.info/security/#index46h2 - http://www.debian.org/security/2017/dsa-3760 - http://www.openwall.com/lists/oss-security/2016/12/21/3 - http://www.openwall.com/lists/oss-security/2016/12/29/3
CVE ID: CVE-2016-10027 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-06T03:07:31.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" feature from a server response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/igniterealtime/Smack/commit/059ee99ba0d5ff7758829acf5a9aeede09ec820b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
a0d5ff7758829acf5a9aeede09ec820b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4WXAZ4JVJXHMEDDXJVWJHPVBF5QCTZF/ - http://www.securityfocus.com/bid/95129 - https://issues.igniterealtime.org/projects/SMACK/issues/SMACK-739 - https://github.com/igniterealtime/Smack/commit/a9d5cd4a611f47123f9561bc5a81a4555fe7cb04 - http://www.openwall.com/lists/oss-security/2016/12/22/12 - https://community.igniterealtime.org/blogs/ignite/2016/11/22/smack-security-advisory-2016-11-22
CVE ID: CVE-2016-10028 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T03:07:31.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=abd7f08b2353f43274b785db8c7224f082ef4d31 - http://www.securitytracker.com/id/1037525
ject.org/?p=qemu.git%3Ba=commit%3Bh=abd7f08b2353f43274b785db8c7224f082ef4d31 - http://www.securitytracker.com/id/1037525 - http://www.securityfocus.com/bid/94981 - https://security.gentoo.org/glsa/201701-49 - https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg01903.html - http://www.openwall.com/lists/oss-security/2016/12/20/1 - http://www.openwall.com/lists/oss-security/2016/12/22/14
CVE ID: CVE-2016-10029 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T03:07:31.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=acfc4846508a02cc4c83aa27799fd7 - http://www.openwall.com/lists/oss-security/2016/12/20/2 - http://www.securitytracker.com
cfc4846508a02cc4c83aa27799fd7 - http://www.openwall.com/lists/oss-security/2016/12/20/2 - http://www.securitytracker.com/id/1037526 - http://www.securityfocus.com/bid/94978 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=2fe760554eb3769d70f608a158474f - http://www.openwall.com/lists/oss-security/2016/12/22/15
CVE ID: CVE-2016-10030 State: PUBLISHED Published: 2017-01-05T11:00:00 Last Updated: 2024-08-06T03:07:31.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on the system. Any exploitation of this is dependent on the user being able to cause or anticipate the failure (non-zero return code) of a Prolog script that their job would run on. This issue affects all Slurm versions from 0.6.0 (Septe
ero return code) of a Prolog script that their job would run on. This issue affects all Slurm versions from 0.6.0 (September 2005) to present. Workarounds to prevent exploitation of this are to either disable your Prolog script, or modify it such that it always returns 0 ("success") and adjust it to set the node as down using scontrol instead of relying on the slurmd to handle that automatically. If you do not have a Prolog set you are unaffected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SchedMD/slurm/commit/92362a92fffe60187df61f99ab11c249d44120ee - http://www.securityfocus.com/bid/95299 - https://www.schedmd.com/news.php?id=178
CVE ID: CVE-2016-10031 State: PUBLISHED Published: 2016-12-27T07:25:00 Last Updated: 2024-08-06T03:07:31.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local attacker must insert an executable file called mysqld.exe or httpd.exe and replace the original files. The next time the service starts, the malicious file will get executed as SYSTEM. NOTE: the vendor disp
original files. The next time the service starts, the malicious file will get executed as SYSTEM. NOTE: the vendor disputes the relevance of this report, taking the position that a configuration in which "'someone' (an attacker) is able to replace files on a PC" is not "the fault of WampServer. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40967/ - https://packetstormsecurity.com/files/140279/Wampserver-3.0.6-Privilege-Escalation.html - https://sourceforge.net/p/wampserver/bugs/52/ - http://forum.wampserver.com/read.php?2%2C144473
CVE ID: CVE-2016-10033 State: PUBLISHED Published: 2016-12-30T19:00:00.000Z Last Updated: 2025-10-21T23:55:47.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html - https://www.drupal.org/psa-2016-004 - https://www.exploit-db.com/exploits/42221/ - https://www.e
gument-Injection.html - https://www.drupal.org/psa-2016-004 - https://www.exploit-db.com/exploits/42221/ - https://www.exploit-db.com/exploits/40969/ - https://www.exploit-db.com/exploits/41962/ - https://www.exploit-db.com/exploits/40968/ - https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html - https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18 - http://www.securityfocus.com/archive/1/539963/100/0/threaded - https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities - http://packetstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/40974/ - h
cketstormsecurity.com/files/140291/PHPMailer-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/40974/ - https://www.exploit-db.com/exploits/40986/ - https://www.exploit-db.com/exploits/40970/ - http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection - https://www.exploit-db.com/exploits/41996/ - http://seclists.org/fulldisclosure/2016/Dec/78 - http://www.securityfocus.com/bid/95108 - http://www.securitytracker.com/id/1037533 - https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html - https://www.exploit-db.com/exploits/42024/
CVE ID: CVE-2016-10034 State: PUBLISHED Published: 2016-12-30T19:00:00 Last Updated: 2024-08-06T03:07:31.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-10 - https://www.exploit-db.com/exploits/42221/ - https://framework.zend.com/security/advis
urity.gentoo.org/glsa/201804-10 - https://www.exploit-db.com/exploits/42221/ - https://framework.zend.com/security/advisory/ZF2016-04 - https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.html - https://www.exploit-db.com/exploits/40979/ - http://www.securitytracker.com/id/1037539 - https://www.exploit-db.com/exploits/40986/ - http://www.securityfocus.com/bid/95144
CVE ID: CVE-2016-10036 State: PUBLISHED Published: 2018-05-01T19:00:00 Last Updated: 2024-08-06T03:07:32.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary servlet application and execute arbitrary code by uploading a war file or (2) possibly write to arbitrary files and cause a denial of service by uploading an HTML file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44543/ - http://packetstormsecurity.com/files/147378/Jfrog-Artifactory-Code-Execution-Shell-Upload.html - https://ww
its/44543/ - http://packetstormsecurity.com/files/147378/Jfrog-Artifactory-Code-Execution-Shell-Upload.html - https://www.jfrog.com/confluence/display/RTF/Release+Notes#ReleaseNotes-Artifactory4.16
CVE ID: CVE-2016-10037 State: PUBLISHED Published: 2016-12-24T11:00:00 Last Updated: 2024-08-06T03:07:31.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, related to browser/directory/getlist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/modxcms/revolution/pull/13177 - https://raw.githubusercontent.com/modxcms/revolution/v2.5.2-pl/core/docs/changelog.txt - http://www.securityfocus.com/bid/95127