auren-research/cyber-sec huggingface dataset:
cveID: CVE-2018-0167
vendorProject: Cisco
product: IOS, XR, and XE Software
vulnerabilityName: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0167
cwes: CWE-119
cveID: CVE-2018-0161
vendorProject: Cisco
product: IOS Software
vulnerabilityName: Cisco IOS Software Resource Management Errors Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0161
cwes: CWE-399
cveID: CVE-2018-0159
vendorProject: Cisco
product: IOS Software and Cisco IOS XE Software
vulnerabilityName: Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0159
cwes: CWE-20
cveID: CVE-2018-0158
vendorProject: Cisco
product: IOS Software and Cisco IOS XE Software
vulnerabilityName: Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0158
cwes: CWE-20
cveID: CVE-2018-0156
vendorProject: Cisco
product: IOS Software and Cisco IOS XE Software
vulnerabilityName: Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service (DoS) condition.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0156
cwes: CWE-399
cveID: CVE-2018-0155
vendorProject: Cisco
product: Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches
vulnerabilityName: Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial-of-service (DoS) condition.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0155
cwes: CWE-388
cveID: CVE-2018-0154
vendorProject: Cisco
product: IOS Software
vulnerabilityName: Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0154
cwes: CWE-399
cveID: CVE-2018-0151
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0151
cwes: CWE-119
cveID: CVE-2017-8540
vendorProject: Microsoft
product: Malware Protection Engine
vulnerabilityName: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
dateAdded: 2022-03-03
shortDescription: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-8540
cwes: CWE-119
cveID: CVE-2017-6744
vendorProject: Cisco
product: IOS software
vulnerabilityName: Cisco IOS Software SNMP Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6744
cwes: CWE-119
cveID: CVE-2017-6743
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6743
cwes: CWE-119
cveID: CVE-2017-6740
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6740
cwes: CWE-119
cveID: CVE-2017-6739
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6739
cwes: CWE-119
cveID: CVE-2017-6738
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6738
cwes: CWE-119
cveID: CVE-2017-6737
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6737
cwes: CWE-119
cveID: CVE-2017-6736
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6736
cwes: CWE-119
cveID: CVE-2017-6663
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in denial-of-service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6663
cveID: CVE-2017-6627
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6627
cwes: CWE-399
cveID: CVE-2017-12319
vendorProject: Cisco
product: IOS XE Software
vulnerabilityName: Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12319
cwes: CWE-20
cveID: CVE-2017-12240
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12240
cwes: CWE-20
cveID: CVE-2017-12238
vendorProject: Cisco
product: Catalyst 6800 Series Switches
vulnerabilityName: Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12238
cwes: CWE-399
cveID: CVE-2017-12237
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12237
cwes: CWE-399
cveID: CVE-2017-12235
vendorProject: Cisco
product: IOS software
vulnerabilityName: Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12235
cwes: CWE-20
cveID: CVE-2017-12234
vendorProject: Cisco
product: IOS software
vulnerabilityName: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12234
cwes: CWE-20
cveID: CVE-2017-12233
vendorProject: Cisco
product: IOS software
vulnerabilityName: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12233
cwes: CWE-20
cveID: CVE-2017-12232
vendorProject: Cisco
product: IOS software
vulnerabilityName: Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12232
cwes: CWE-399
cveID: CVE-2017-12231
vendorProject: Cisco
product: IOS software
vulnerabilityName: Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12231
cwes: CWE-399
cveID: CVE-2017-11826
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-11826
cwes: CWE-119
cveID: CVE-2017-11292
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Type Confusion Vulnerability
dateAdded: 2022-03-03
shortDescription: Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-11292
cwes: CWE-843
cveID: CVE-2017-0261
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Use-After-Free Vulnerability
dateAdded: 2022-03-03
shortDescription: Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0261
cwes: CWE-416
cveID: CVE-2017-0001
vendorProject: Microsoft
product: Graphics Device Interface (GDI)
vulnerabilityName: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0001
cveID: CVE-2016-8562
vendorProject: Siemens
product: SIMATIC CP
vulnerabilityName: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
dateAdded: 2022-03-03
shortDescription: An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-8562
cwes: CWE-20
cveID: CVE-2016-7855
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Use-After-Free Vulnerability
dateAdded: 2022-03-03
shortDescription: Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-7855
cwes: CWE-416
cveID: CVE-2016-7262
vendorProject: Microsoft
product: Excel
vulnerabilityName: Microsoft Office Security Feature Bypass Vulnerability
dateAdded: 2022-03-03
shortDescription: A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-7262
cwes: CWE-20
cveID: CVE-2016-7193
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Memory Corruption Vulnerability
dateAdded: 2022-03-03
shortDescription: Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-7193
cwes: CWE-119
cveID: CVE-2016-5195
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Race Condition Vulnerability
dateAdded: 2022-03-03
shortDescription: Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-5195
cwes: CWE-362
cveID: CVE-2016-4117
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-4117
cveID: CVE-2016-1019
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-1019
cveID: CVE-2016-0099
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-0099
cwes: CWE-264
cveID: CVE-2015-7645
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Arbitrary Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-03-24
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-7645