Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
n implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation in js/tbl_chart.js, or (7) the zoom-search implementation in rows_zoom.phtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/d648ade18d6cbb796a93261491c121f078df2d88 - https://github.com/phpmyadmin/phpmyadmin/commit/4d21b5c077db50c2a54b7f569d20f463cc2651f5 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - https://github.com/phpmyadmin/phpmyadmin/commit/895a131d2eb7e447757a35d5731c7d647823ea8b - http://www.debian.org/security/2016/dsa-3627 - http://www.securityfocus.com/bid/91390 - https://g
35d5731c7d647823ea8b - http://www.debian.org/security/2016/dsa-3627 - http://www.securityfocus.com/bid/91390 - https://github.com/phpmyadmin/phpmyadmin/commit/615212a14d7d87712202f37354acf8581987fc5a - https://www.phpmyadmin.net/security/PMASA-2016-26/ - https://github.com/phpmyadmin/phpmyadmin/commit/79661610f6f65443e0ec1e382a7240437f28436c - https://github.com/phpmyadmin/phpmyadmin/commit/be3ecbb4cca3fbe20e3b3aa4e049902d18b60865 - https://github.com/phpmyadmin/phpmyadmin/commit/8716855b309dbe65d7b9a5d681b80579b225b322 - https://github.com/phpmyadmin/phpmyadmin/commit/960fd1fd52023047a23d069178bfff7463c2cefc - https://security.gentoo.org/glsa/201701-32 - http://lists.opensuse.org/opensuse-u
d1fd52023047a23d069178bfff7463c2cefc - https://security.gentoo.org/glsa/201701-32 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html
CVE ID: CVE-2016-5734 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:08:00.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted string, as demonstrated by the table search-and-replace implementation. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40185/ - https://github.com/phpmyadmin/phpmyadmin/commit/4bcc606225f15bac0b07780e74f667f6ac283da7 - http:
b.com/exploits/40185/ - https://github.com/phpmyadmin/phpmyadmin/commit/4bcc606225f15bac0b07780e74f667f6ac283da7 - http://www.securityfocus.com/bid/91387 - https://www.phpmyadmin.net/security/PMASA-2016-27/ - https://github.com/phpmyadmin/phpmyadmin/commit/1cc7466db3a05e95fe57a6702f41773e6829d54b - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-5735 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T01:07:59.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://sf.snu.ac.kr/gil.hur/publications/shovel.pdf - https://github.com/pornel/pngquant/commit/b7c217680cda02dddced245d237ebe8c383be285 - https://lists.debian.org/debian-lts-announce/2020/06/msg00028.html
CVE ID: CVE-2016-5736 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T01:07:59.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP DNS 12.x before 12.0.0 HF2; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 before HF16; BIG-IP GTM 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1; and BIG-IP P
2.1 before HF16; BIG-IP GTM 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1; and BIG-IP PSM 11.4.0 through 11.4.1 improperly enables the anonymous IPsec IKE peer configuration object, which allows remote attackers to establish an IKE Phase 1 negotiation and possibly conduct brute-force attacks against Phase 2 negotiations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036618 - https://support.f5.com/kb/en-us/solutions/public/k/10/sol10133477.html
CVE ID: CVE-2016-5737 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-06T01:07:59.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91352 - http://www.openwall.com/lists/oss-security/2016/06/22/2 - https://github.com/openstack-infra/puppet-gerrit/commit/8573c2ee172f66c1667de49685c88fdc8883ca8b
CVE ID: CVE-2016-5739 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:08:00.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - https://github.com/phpmyadmin/phpmyadmin/comm
nces: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - https://github.com/phpmyadmin/phpmyadmin/commit/2f4950828ec241e8cbdcf13090c2582a6fa620cb - https://www.phpmyadmin.net/security/PMASA-2016-28/ - http://www.debian.org/security/2016/dsa-3627 - http://www.securityfocus.com/bid/91389 - https://github.com/phpmyadmin/phpmyadmin/commit/1e5716cb96d46efc305381ae0da08e73fe340f05 - https://security.gentoo.org/glsa/201701-32 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html
CVE ID: CVE-2016-5740 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T01:08:00.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical attachments within scheduling E-Mails. This content, for example an appointment's location, will be presented to the user at the E-Mail App, depending on the invitation workflow. This code gets executed within the context of the user's current session. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mai
n a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40378/ - http://www.securityfocus.com/bid/92922 - http://packetstormsecurity.com/files/138700/Open-Xchange-App-Suite-7.8.2-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/539394/100/0/threaded
CVE ID: CVE-2016-5742 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:07:59.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before 6.2.6 and Movable Type Open Source 5.2.13 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/22/5 - http://www.securitytracker.com/id/1036160 - http://www.openwall.com/lists/oss-security/2016/06/22/3 - https://movabletype.org/news/2016/06/movable_type_
d/1036160 - http://www.openwall.com/lists/oss-security/2016/06/22/3 - https://movabletype.org/news/2016/06/movable_type_626_and_613_released.html - http://www.openwall.com/lists/oss-security/2016/06/22/6
CVE ID: CVE-2016-5743 State: PUBLISHED Published: 2016-07-22T15:00:00 Last Updated: 2024-08-06T01:08:00.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
arbitrary code via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036441 - https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf - http://www.securityfocus.com/bid/92112
CVE ID: CVE-2016-5744 State: PUBLISHED Published: 2016-07-22T15:00:00 Last Updated: 2024-08-06T01:07:59.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92116 - http://www.securitytracker.com/id/1036441 - https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf
CVE ID: CVE-2016-5745 State: PUBLISHED Published: 2016-10-05T16:00:00 Last Updated: 2024-08-06T01:07:59.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: F5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF11, 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2 allow remote attackers to modify or extract system configuration files via vectors involving NAT64. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94240 - http://www.securitytracker.com/id/1036927 - https://support.f5.com/kb/en-us/solutions/public/k/64/sol6
s.com/bid/94240 - http://www.securitytracker.com/id/1036927 - https://support.f5.com/kb/en-us/solutions/public/k/64/sol64743453.html
CVE ID: CVE-2016-5746 State: PUBLISHED Published: 2016-09-26T15:00:00 Last Updated: 2024-08-06T01:07:59.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openSUSE/libstorage/pull/162 - https://github.com/yast/yast-storage/pull/224 - https://github.com/yast/yast-storage/pull/226 - https://bugzilla.suse.com/show_bug.cgi?id=986971 - https:/
ge/pull/224 - https://github.com/yast/yast-storage/pull/226 - https://bugzilla.suse.com/show_bug.cgi?id=986971 - https://github.com/yast/yast-storage/pull/227 - https://github.com/openSUSE/libstorage-ng/pull/123 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00032.html - http://www.securityfocus.com/bid/93169 - https://github.com/yast/yast-storage/pull/223 - https://github.com/openSUSE/libstorage/pull/163
CVE ID: CVE-2016-5747 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:08:00.805Z Vendors: n/a Products: Novell eDirectory Problem Types: predictable cookies Description: A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging predictable cookies. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7016794
CVE ID: CVE-2016-5748 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:07:59.910Z Vendors: n/a Products: NetIQ Access Manager Problem Types: XXE Description: External Entity Processing (XXE) vulnerability in the "risk score" application of NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to disclose the content of local files to logged-in users. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017797
CVE ID: CVE-2016-5749 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:07:59.961Z Vendors: n/a Products: NetIQ Access Manager Problem Types: XXE Description: NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity (XXE) attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017806
CVE ID: CVE-2016-5750 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:07:59.952Z Vendors: n/a Products: NetIQ iManager Problem Types: code execution Description: The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to upload JSP pages that would be executed as the iManager user, allowing code execution by logged-in remote users. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017807
CVE ID: CVE-2016-5751 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:08:00.709Z Vendors: n/a Products: NetIQ Access Manager Problem Types: unfiltered finalizer target URL Description: An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 could be used to trigger XSS and leak authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017808
CVE ID: CVE-2016-5752 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:08:00.717Z Vendors: n/a Products: NetIQ Access Manager Problem Types: handling unsigned SAML requests incorrectly Description: The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicious "Assertion Consumer Service URL" instead of the original requester. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017809
CVE ID: CVE-2016-5754 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:15:09.070Z Vendors: n/a Products: NetIQ Access Manager Problem Types: leak information Description: Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before SP2. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017811
CVE ID: CVE-2016-5755 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:15:09.052Z Vendors: n/a Products: NetIQ Access Manager Problem Types: clickjacking Description: NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to clickjacking attacks due to a missing SAMEORIGIN filter in the "high encryption" setting. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017812
CVE ID: CVE-2016-5756 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:15:10.551Z Vendors: n/a Products: NetIQ Access Manager Problem Types: XSS Description: Multiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 were vulnerable to Reflected Cross Site Scripting attacks which could be used to hijack user sessions: nps/servlet/frameservice, nps/servlet/webacc, roma/admin/cntl, roma/jsp/admin/appliance/devicedetail_edit.jsp, roma/jsp/admin/managementip/mgmt_ip_details_frameset.jsp, roma/jsp/admin/managementip/mgmt_ip_details_middleframe.jsp, roma/jsp/volsc/monitoring/appliance.jsp, and roma/jsp/volsc/monitoring/gr
/managementip/mgmt_ip_details_middleframe.jsp, roma/jsp/volsc/monitoring/appliance.jsp, and roma/jsp/volsc/monitoring/graph.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017813
CVE ID: CVE-2016-5757 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:15:10.625Z Vendors: n/a Products: NetIQ Access Manager Problem Types: iFrame manipulation Description: iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks, which could allow remote users to gain access to authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017818
CVE ID: CVE-2016-5758 State: PUBLISHED Published: 2017-03-23T06:36:00 Last Updated: 2024-08-06T01:15:10.652Z Vendors: n/a Products: NetIQ Access Manager Problem Types: cross site request forgery Description: A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017817 - http://www.securityfocus.com/bid/97035
CVE ID: CVE-2016-5759 State: PUBLISHED Published: 2017-09-08T18:00:00 Last Updated: 2024-08-06T01:15:10.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root. Additional Analyst Notes: - CVE Program Container: References: - http://lists.suse.com/pipermail/sle-security-updates/2016-October/002337.html - http://lists.opensuse.org/opensuse-updates/2016-10/msg00083.html
CVE ID: CVE-2016-5760 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:15:10.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/138503/Micro-Focus-GroupWise-Cross-Site-Scripting-Overflows.html - http://www.securityfocus.com/archive/1/539296/
/files/138503/Micro-Focus-GroupWise-Cross-Site-Scripting-Overflows.html - http://www.securityfocus.com/archive/1/539296/100/0/threaded - http://www.securityfocus.com/bid/92646 - http://seclists.org/fulldisclosure/2016/Aug/123 - https://www.novell.com/support/kb/doc.php?id=7017973 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20160825-0_Micro_Focus_GroupWise_Multiple_vulnerabilities_v10.txt
CVE ID: CVE-2016-5761 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:15:09.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted email. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/138503/Micro-Focus-GroupWise-Cross-Site-Scripting-Overflows.html - http://www.securityfocus.com/archive/1/539296/100/0/threaded - http://www.securityfocus.com/bid/92645 - http://seclists.org/fulldisclosure/2016/Aug/123 - https://www.novell.com
aded - http://www.securityfocus.com/bid/92645 - http://seclists.org/fulldisclosure/2016/Aug/123 - https://www.novell.com/support/kb/doc.php?id=7017974 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20160825-0_Micro_Focus_GroupWise_Multiple_vulnerabilities_v10.txt
CVE ID: CVE-2016-5762 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:15:10.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92642 - https://www.novell.com/support/kb/doc.php?id=7017975 - http://packetstormsecurity.com/files/138503/Micro-Focus-GroupWise-Cross-Site-Scripting-Overflows.html - http://www.securityfoc
/packetstormsecurity.com/files/138503/Micro-Focus-GroupWise-Cross-Site-Scripting-Overflows.html - http://www.securityfocus.com/archive/1/539296/100/0/threaded - http://seclists.org/fulldisclosure/2016/Aug/123 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20160825-0_Micro_Focus_GroupWise_Multiple_vulnerabilities_v10.txt
CVE ID: CVE-2016-5763 State: PUBLISHED Published: 2016-11-15T19:00:00 Last Updated: 2024-08-06T01:15:08.887Z Vendors: n/a Products: Novell Open Enterprise Server 11 and 2015 Problem Types: unauthorized file access and modification Description: Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update 10992, OES2015 before Scheduled Maintenance Update 10990, OES11 SP3 before Scheduled Maintenance Update 10991, OES11 SP2 before Scheduled Maintenance Update 10989) might allow authenticated remote attackers to perform unauthorized file access and modification. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9
ss and modification. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94348 - http://download.novell.com/Download?buildid=dfqmrymc0Rg~ - http://download.novell.com/Download?buildid=s9_RxhgC8KU~ - http://download.novell.com/Download?buildid=3Ho1yp5JOXA~ - http://download.novell.com/Download?buildid=Fj0Hdns7mxA~
CVE ID: CVE-2016-5764 State: PUBLISHED Published: 2016-10-27T20:00:00 Last Updated: 2024-08-06T01:15:09.088Z Vendors: n/a Products: Micro Focus Rumba FTP 4.X before 4.5 (HF 14668) Problem Types: unspecified Description: Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server. Additional Analyst Notes: - CVE Program Container: References: - http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28731.rumba-ftp-4-x-security-update.aspx - http://www.securityfocus.com/bid/93974 - https://www.exploit-d
knowledge_base/28731.rumba-ftp-4-x-security-update.aspx - http://www.securityfocus.com/bid/93974 - https://www.exploit-db.com/exploits/40651/