Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1140 State: PUBLISHED Published: 2016-01-30T15:00:00 Last Updated: 2024-08-05T22:48:13.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06 - http://jvn.jp/en/jp/JVN54686544/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000011
CVE ID: CVE-2016-1141 State: PUBLISHED Published: 2016-01-30T15:00:00 Last Updated: 2024-08-05T22:48:13.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000012 - http://jvn.jp/en/jp/JVN54686544/index.html
CVE ID: CVE-2016-1142 State: PUBLISHED Published: 2016-01-16T02:00:00 Last Updated: 2024-08-05T22:48:13.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.acmailer.jp/info/de.cgi?id=64 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000002 - http://jvn.jp/en/jp/JVN50899877/index.html
CVE ID: CVE-2016-1143 State: PUBLISHED Published: 2016-01-30T15:00:00 Last Updated: 2024-08-05T22:48:13.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ikeay/vinemv/commit/f41efbcac1f9262a161ebc1babfcf55fae9e939a - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000016 - http://jvn.jp/en/jp/JVN12165579/index.html
CVE ID: CVE-2016-1144 State: PUBLISHED Published: 2016-01-30T15:00:00 Last Updated: 2024-08-05T22:48:12.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000017 - http://www.ws-download.net/info.php?type=version&id=V0001081 - http://jvn.jp/en/jp/JVN26921563/index.html
CVE ID: CVE-2016-1145 State: PUBLISHED Published: 2016-01-30T15:00:00 Last Updated: 2024-08-05T22:48:13.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.3.1-1 on Linux and Solaris allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN03050861/index.html - http://jpn.nec.com/security-info/secinfo/nv16-001.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000015
CVE ID: CVE-2016-1146 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-1147 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-1148 State: PUBLISHED Published: 2017-04-21T14:00:00 Last Updated: 2024-08-05T22:48:12.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akerun - Smart Lock Robot App for iOS before 1.2.4 does not verify SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN22578691/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000019.html - https://akerun.com/2016-02-12-akerun-ios-app-security-update/
CVE ID: CVE-2016-1149 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-05T22:48:12.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1150. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026 - https://cs.cybozu.co.jp/2015/006072.html - https://cs.cybozu.co.jp/2015/006087.html - https://cs.cybozu.co.jp/2016/006107.html - http://jvn.jp/e
CVE ID: CVE-2016-1150 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-05T22:48:13.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1149. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026 - https://cs.cybozu.co.jp/2015/006072.html - https://cs.cybozu.co.jp/2015/006087.html - https://cs.cybozu.co.jp/2016/006107.html - http://jvn.jp/e
CVE ID: CVE-2016-1151 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-05T22:48:13.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000024 - https://cs.cybozu.co.jp/2016/006111.html - http://jvn.jp/en/jp/JVN64209269/index.html
CVE ID: CVE-2016-1152 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-05T22:48:13.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2015-8486. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023 - http://jvn.jp/en/jp/JVN48720230/index.html - https://cs.cybozu.co.jp/2015/006076.html
CVE ID: CVE-2016-1153 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-05T22:48:13.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different vulnerability than CVE-2015-8489. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000020 - http://jvn.jp/en/jp/JVN20246313/index.html - https://cs.cybozu.co.jp/2016/006108.html
CVE ID: CVE-2016-1154 State: PUBLISHED Published: 2016-02-19T19:00:00 Last Updated: 2024-08-05T22:48:13.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN31524757/index.html - http://www.ec-cube.net/products/detail.php?product_id=279 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000027
CVE ID: CVE-2016-1155 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-05T22:48:13.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97662 - https://jvn.jp/vu/JVNVU99757346/index.html - https://android.googlesource.com/platform/external/okhttp/+/71b9f47b26fb57ac3e436a19519c6e3ec70e86eb
CVE ID: CVE-2016-1156 State: PUBLISHED Published: 2016-02-19T19:00:00 Last Updated: 2024-08-05T22:48:13.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: LINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated users to cause a denial of service (application crash) via a crafted post that is mishandled when displaying a Timeline. Additional Analyst Notes: - CVE Program Container: References: - http://linecorp.com/ja/security/article/53 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000029 - http://jvn.jp/en/jp/JVN46044093/index.html
CVE ID: CVE-2016-1157 State: PUBLISHED Published: 2016-02-23T02:00:00 Last Updated: 2024-08-05T22:48:13.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in log_chat.cgi in Script* Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN93535632/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000031 - http://r.o0o0.jp/sc/log-chat/
CVE ID: CVE-2016-1158 State: PUBLISHED Published: 2016-03-03T22:00:00 Last Updated: 2024-08-05T22:48:13.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authentication of administrators for requests that perform administrative functions. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000032 - http://jvn.jp/en/jp/JVN59349382/index.html - http://corega.jp/support/security/20160229_wlbargmh_wlbargnl.htm
CVE ID: CVE-2016-1159 State: PUBLISHED Published: 2020-03-09T16:29:51 Last Updated: 2024-08-05T22:48:13.005Z Vendors: ZOHO Products: Password Manager Pro (PMP) Problem Types: obtain sensitive information Description: In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service. Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/cve-2016-1159/ - https://www.manageengine.com/products/passwordmanagerpro/release-notes.html - http://jvn.jp/vu/JVNVU90405898/index.html - https://www.manageengine.com/
oducts/passwordmanagerpro/release-notes.html - http://jvn.jp/vu/JVNVU90405898/index.html - https://www.manageengine.com/products/passwordmanagerpro/issues-fixed.html
CVE ID: CVE-2016-1160 State: PUBLISHED Published: 2016-03-26T01:00:00 Last Updated: 2024-08-05T22:48:13.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000034 - http://jvn.jp/en/jp/JVN86517621/index.html - https://wordpress.org/plugins/wp-favorite-posts/changelog/
CVE ID: CVE-2016-1161 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-05T22:48:13.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 (Build 8500). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91531 - http://jvn.jp/en/vu/JVNVU95113461/ - https://www.excellium-services.com/cert-xlm-advisory/cve-2016-1161/
CVE ID: CVE-2016-1162 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-1163 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-1164 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-1165 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-1166 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-1167 State: PUBLISHED Published: 2016-04-01T14:00:00 Last Updated: 2024-08-05T22:48:13.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN82020528/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000036 - http://jpn.nec.com/security-info/secinfo/nv16-005.html
CVE ID: CVE-2016-1168 State: PUBLISHED Published: 2016-04-01T14:00:00 Last Updated: 2024-08-05T22:48:13.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000035 - http://jvn.jp/en/jp/JVN07818796/index.html - http://jpn.nec.com/security-info/secinfo/nv16-004.html
CVE ID: CVE-2016-1169 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:48:13.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000044 - https://hiniarata.jp/news/archives/55 - http://jvn.jp/en/jp/JVN55801246/index.html
CVE ID: CVE-2016-1170 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:48:13.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - https://hiniarata.jp/news/archives/55 - http://jvn.jp/en/jp/JVN55801246/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000045
CVE ID: CVE-2016-1171 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:48:13.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN13288761/index.html - https://hiniarata.jp/news/archives/55 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000040
CVE ID: CVE-2016-1172 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:48:13.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000041 - http://jvn.jp/en/jp/JVN13288761/index.html - https://hiniarata.jp/news/archives/55
CVE ID: CVE-2016-1173 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:48:13.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN26627848/index.html - https://hiniarata.jp/news/archives/55 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000042
CVE ID: CVE-2016-1174 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-05T22:48:13.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN26627848/index.html - https://hiniarata.jp/news/archives/55 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000043
CVE ID: CVE-2016-1175 State: PUBLISHED Published: 2016-04-05T14:00:00 Last Updated: 2024-08-05T22:48:13.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN47164236/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000039 - http://www.sharp.co.jp/support/photoplayer/fw_update.html
CVE ID: CVE-2016-1176 State: PUBLISHED Published: 2016-04-05T14:00:00 Last Updated: 2024-08-05T22:48:13.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000038 - http://jvn.jp/en/jp/JVN41875357/index.html
CVE ID: CVE-2016-1177 State: PUBLISHED Published: 2016-04-05T01:00:00 Last Updated: 2024-08-05T22:48:13.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28480773/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000037 - https://service.falconsc.com/
CVE ID: CVE-2016-1178 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-05T22:48:13.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN03975805/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000047.html - https://developer.a-blogcms.jp/blog/patch/entry-2363.html
CVE ID: CVE-2016-1179 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-05T22:48:13.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000046.html - https://developer.a-blogcms.jp/blog/patch/entry-2363.html - http://jvn.jp/en/jp/JVN73166466/index.html
CVE ID: CVE-2016-1180 State: PUBLISHED Published: 2016-04-08T15:00:00 Last Updated: 2024-08-05T22:48:13.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.cyber-will.co.jp/SA_JVN_78482127 - https://www.ec-cube.net/products/detail.php?product_id=799 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000048 - http://jvn.jp/en/jp/JVN78482127/index.html
CVE ID: CVE-2016-1181 State: PUBLISHED Published: 2016-07-04T22:00:00 Last Updated: 2024-08-05T22:48:13.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000096 - http://www.securityfocus.com/bid/91068 - http://www.securitytracker.com/id/1036056 - http://jvn.jp/en/jp/JVN03188560/index.html - http
urityfocus.com/bid/91068 - http://www.securitytracker.com/id/1036056 - http://jvn.jp/en/jp/JVN03188560/index.html - http://www.securityfocus.com/bid/91787 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.orac
pujan2019-5072801.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpujan2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://security.netapp.com/advisory/ntap-20180629-0006/ - https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8 - https://bugzilla.redhat.com/show_bug.cgi?id=1343538 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://security-tr
w_bug.cgi?id=1343538 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://security-tracker.debian.org/tracker/CVE-2016-1181
CVE ID: CVE-2016-1182 State: PUBLISHED Published: 2016-07-04T22:00:00 Last Updated: 2024-08-05T22:48:13.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a related issue to CVE-2015-0899. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000097 - http://jvn.jp/en/jp/JVN65044642/index.html - http://www.securitytracker.com/id/1036056 - http://www.securityfocus.com/bid/91067 - http://www.securityf
2/index.html - http://www.securitytracker.com/id/1036056 - http://www.securityfocus.com/bid/91067 - http://www.securityfocus.com/bid/91787 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security