Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2165 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-05T23:17:50.673Z Vendors: Pivotal Products: Cloud Foundry Problem Types: XSS Description: The Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic Runtime versions prior to 1.5.19 AND 1.6.x versions prior to 1.6.20 are not cleansing request URL paths when they are invalid and are returning them in the 404 response. This could allow malicious scripts to be written directly into the 404 response. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-2165
CVE ID: CVE-2016-2166 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-05T23:17:50.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/PROTON-1157 - http://packetstormsecurity.com/files/136403/Apache-
r: References: - https://issues.apache.org/jira/browse/PROTON-1157 - http://packetstormsecurity.com/files/136403/Apache-Qpid-Proton-0.12.0-SSL-Failure.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182414.html - https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git%3Bh=a058585 - http://qpid.apache.org/releases/qpid-proton-0.12.1/release-notes.html - http://www.securityfocus.com/archive/1/537864/100/0/threaded - https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E
CVE ID: CVE-2016-2167 State: PUBLISHED Published: 2016-05-05T18:00:00 Last Updated: 2024-08-05T23:17:50.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184545.html - http://www.securityfocus.com/bid/89417 - http://mail-archives.apache.or
ipermail/package-announce/2016-May/184545.html - http://www.securityfocus.com/bid/89417 - http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgJet+7_MAhomFVOXPgLtewcUw9w=k9zdPCkq5tvPxVMA%40mail.gmail.com%3E - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.417496 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html - http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgfn1iKueW51EpmXzXi_URNfGNofZSgOyW1_jnSeNm5DQ%40mail.gmail.com%3E - http://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html - http://www.debian.org/security/2016/dsa-3561 - http://www.securitytracker
e.org/opensuse-updates/2016-05/msg00043.html - http://www.debian.org/security/2016/dsa-3561 - http://www.securitytracker.com/id/1035706 - https://security.gentoo.org/glsa/201610-05 - https://www.oracle.com/security-alerts/cpuoct2020.html - http://subversion.apache.org/security/CVE-2016-2167-advisory.txt
CVE ID: CVE-2016-2168 State: PUBLISHED Published: 2016-05-05T18:00:00 Last Updated: 2024-08-05T23:17:50.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184545.html - http://mail-archives.apache.org/mod_mbox/subversion-announce
oject.org/pipermail/package-announce/2016-May/184545.html - http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgJet+7_MAhomFVOXPgLtewcUw9w=k9zdPCkq5tvPxVMA%40mail.gmail.com%3E - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.417496 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00044.html - http://www.securitytracker.com/id/1035707 - http://mail-archives.apache.org/mod_mbox/subversion-announce/201604.mbox/%3CCAP_GPNgfn1iKueW51EpmXzXi_URNfGNofZSgOyW1_jnSeNm5DQ%40mail.gmail.com%3E - http://www.securityfocus.com/bid/89320 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html - http://www.debian.
/www.securityfocus.com/bid/89320 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00043.html - http://www.debian.org/security/2016/dsa-3561 - https://security.gentoo.org/glsa/201610-05 - https://www.oracle.com/security-alerts/cpuoct2020.html - http://subversion.apache.org/security/CVE-2016-2168-advisory.txt
CVE ID: CVE-2016-2169 State: PUBLISHED Published: 2018-04-18T16:00:00Z Last Updated: 2024-09-16T18:44:03.609Z Vendors: Cloud Foundry Products: Cloud Controller Problem Types: Business logic Description: Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application developer may create an application with a route that conflicts with a platform service route and receive traffic intended for the service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudfoundry/cloud_controller_ng/issues/568
CVE ID: CVE-2016-2170 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-05T23:17:50.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Additional Analyst Notes: - CVE Program Container: References: - http://ofbiz.apache.org/download.html#vulnerabilities - https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_12_04 - http://www.securitytracker.com/id/1035513 - https://issues.apache.org/jira/browse/OFBIZ-6726 - https://cwiki.apache.org/confluence/displa
tytracker.com/id/1035513 - https://issues.apache.org/jira/browse/OFBIZ-6726 - https://cwiki.apache.org/confluence/display/OFBIZ/The+infamous+Java+serialization+vulnerability - http://www.securityfocus.com/archive/1/538034/100/0/threaded - https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_13_07 - http://packetstormsecurity.com/files/136639/Apache-OFBiz-13.07.02-13.07.01-Information-Disclosure.html - https://lists.apache.org/thread.html/r0d97a3b7a14777b9e9e085b483629d2774343c4723236d1c73f43ff0%40%3Cdev.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/reccf8c8a58337ce7c035495d3d82fbc549e97036a9789a2a7d9cccf6%40%3Cdev.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/
c8a58337ce7c035495d3d82fbc549e97036a9789a2a7d9cccf6%40%3Cdev.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rec5e9fdcdca13099cfb29f632333f44ad1dd60d90f67b90434e4467a%40%3Cdev.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rc9bd0d3d794dc370bc70585960841868cb29b92dcc80552b84ca2599%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r3ee005dd767cd83f522719423f5e7dd316f168ddbd1dc51a13d4e244%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42
Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E
CVE ID: CVE-2016-2171 State: PUBLISHED Published: 2016-04-11T14:00:00 Last Updated: 2024-08-05T23:17:50.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add, (2) edit, or (3) delete users via the REST API. Additional Analyst Notes: - CVE Program Container: References: - https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-2171 - http://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CB9165E38-F3D8-496D-8642-8A53FCAC736A%40gmail.com%3E - http://haxx.ml/post/140552592371/remote-code-executio
1603.mbox/%3CB9165E38-F3D8-496D-8642-8A53FCAC736A%40gmail.com%3E - http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and
CVE ID: CVE-2016-2172 State: REJECTED Published: 2017-05-22T19:00:00 Last Updated: 2017-05-22T18:57:01 Description: No description available.
CVE ID: CVE-2016-2173 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T23:17:50.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182959.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182551.html - https://pivotal.io/security/cve-2016-2173 - https://bugzilla.redhat.com/show_bug.cgi?id=1326205 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April
tps://bugzilla.redhat.com/show_bug.cgi?id=1326205 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182850.html
CVE ID: CVE-2016-2174 State: PUBLISHED Published: 2016-06-13T14:00:00 Last Updated: 2024-08-05T23:17:50.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/01/3 - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2016-2175 State: PUBLISHED Published: 2016-06-01T20:00:00 Last Updated: 2024-08-05T23:17:50.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0179.html - http://packetstormsecurity.com/files/137214/Apache-PDFBox-1.8.11-2.0.0-XML-Injection.html - http://mail-archives.us.apache.org/mod_mbox/www-announce/201605.mbox/%3C83a03bcf-f86b-4688-37b5-615c080291d8%40apache.org%3E
://mail-archives.us.apache.org/mod_mbox/www-announce/201605.mbox/%3C83a03bcf-f86b-4688-37b5-615c080291d8%40apache.org%3E - http://www.debian.org/security/2016/dsa-3606 - http://www.securityfocus.com/archive/1/538503/100/0/threaded - http://svn.apache.org/viewvc?view=revision&revision=1739564 - http://www.securityfocus.com/bid/90902 - http://svn.apache.org/viewvc?view=revision&revision=1739565 - http://rhn.redhat.com/errata/RHSA-2017-0272.html - http://rhn.redhat.com/errata/RHSA-2017-0248.html - http://rhn.redhat.com/errata/RHSA-2017-0249.html - https://lists.apache.org/thread.html/ad5fbc86c1d1821ae1b963e8561ab6d6a5f66b2848e84f5a31477f54%40%3Ccommits.tika.apache.org%3E
CVE ID: CVE-2016-2176 State: PUBLISHED Published: 2016-05-05T00:00:00 Last Updated: 2024-08-05T23:17:50.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://h20566.www2
ware-security.542103 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=2919516136a4227d9e6d8f2fe66ef976aaf8c561 - http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10160 - https://security.gentoo.org/glsa/201612-16 - http://www.securitytracker.com/id/1035721 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-
http://www.securitytracker.com/id/1035721 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/89746 - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - https://www.tenable.com/security/tns-2016-18 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202 - https://security.netapp.com/advisory/ntap-20160504-0001/ - http
esecure.net/articles/Pulse_Security_Advisories/SA40202 - https://security.netapp.com/advisory/ntap-20160504-0001/ - http://www.securityfocus.com/bid/91787 - https://www.openssl.org/news/secadv/20160503.txt - https://support.apple.com/HT206903 - https://bto.bluecoat.com/security-advisory/sa123 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-2177 State: PUBLISHED Published: 2016-06-20T00:00:00 Last Updated: 2024-08-05T23:17:50.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://www.splunk.com/view/SP-CAAAPUE - http://www.oracle.com/technetwork/security-advisory
e.com/security/tns-2016-20 - http://www.splunk.com/view/SP-CAAAPUE - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://rhn.redhat.com/errata/RHSA-2017-1659.html - https://access.redhat.com/errata/RHSA-2017:1658 - http://rhn.redhat.com/errata/RHSA-2016-1940.html - http://www.securitytracker.com/id/1036088 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - https://security.gentoo.org/glsa/201612-16 - https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager - https://kb.pulsesecure.net/articles/Pulse_Security_Advis
rabilities-within-schneider-electric-floating-license-manager - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us - http://www.splunk.com/view/SP-CAAAPSV - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.tenable.com/security/tns-2016-16 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7 - https://www.tenable.com/security/tns-2016-21 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle
ecurity/tns-2016-21 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://access.redhat.com/errata/RHSA-2017:0194 - https://access.redhat.com/errata/RHSA-2017:0193 - https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/ - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://bto.bluecoat.com/security-advisory/sa132 - https://bugzilla.redhat.com/show_bug.cgi?id=1341705 - https://www.schneider-ele
o.bluecoat.com/security-advisory/sa132 - https://bugzilla.redhat.com/show_bug.cgi?id=1341705 - https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/ - http://www.securityfocus.com/bid/91319 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03763en_us - https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448 - https://kc.mcafee.com/corporate/index?page=content&id=SB10165 - http://kb.juniper.net/Info
play?docId=emr_na-c05302448 - https://kc.mcafee.com/corporate/index?page=content&id=SB10165 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - http://www.openwall.com/lists/oss-security/2016/06/08/9 - https://kc.mcafee.com/corporate/index?page=content&id=SB10215 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html - http://www.ubuntu.com/usn/USN-3087-1 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html - http://www.ubuntu.com/usn/USN-3087-2 - http://www.s
ists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html - http://www.ubuntu.com/usn/USN-3087-2 - http://www.securityfocus.com/archive/1/540957/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html - http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html - http://seclists.org/fulldisclosure/2017/Jul/31 - http://www.ubuntu.com/usn/USN-3181-1 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us - https://support.f5.com/csp/article/K2387336
pe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us - https://support.f5.com/csp/article/K23873366 - http://www.debian.org/security/2016/dsa-3673 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html - http://www.huawei.com/en/psirt/security-advisories/
ists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en - https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-2178 State: PUBLISHED Published: 2016-06-20T00:00:00 Last Updated: 2024-08-05T23:17:50.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://www.splunk.com/view/SP-CAAAPUE - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://rhn.redhat.com/errata/RHSA-2017-1659.html - http://w
.com/technetwork/security-advisory/cpujan2018-3236628.html - http://rhn.redhat.com/errata/RHSA-2017-1659.html - http://www.openwall.com/lists/oss-security/2016/06/09/8 - https://access.redhat.com/errata/RHSA-2017:1658 - http://rhn.redhat.com/errata/RHSA-2016-1940.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - https://security.gentoo.org/glsa/201612-16 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us - http://www.splunk.com/view/SP-CAAAPSV - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.oracle.com/technet
w.splunk.com/view/SP-CAAAPSV - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ - https://www.tenable.com/security/tns-2016-16 - https://www.tenable.com/security/tns-2016-21 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=399944622df7bd81af62e67ea967c470534090e2 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securityfocus.c
7c470534090e2 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securityfocus.com/bid/91081 - https://access.redhat.com/errata/RHSA-2017:0194 - http://www.openwall.com/lists/oss-security/2016/06/08/2 - https://access.redhat.com/errata/RHSA-2017:0193 - https://bugzilla.redhat.com/show_bug.cgi?id=1343400 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://bto.bluecoat.com/security-advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc - http://lists.opens
sory/cpujul2017-3236622.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448 - http://www.securitytracker.com/id/1036054 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - http://eprint.iacr.org/2016/594.pdf - https://kc.mcafee.com/corporate/index?page=content&id=SB10215 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html - http://www.ubuntu.com/usn/USN-3087-1 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html - http://tools.cisco.com/se