auren-research/cyber-sec huggingface dataset:
cveID: CVE-2016-1010
vendorProject: Adobe
product: Flash Player and AIR
vulnerabilityName: Adobe Flash Player and AIR Integer Overflow Vulnerability
dateAdded: 2022-05-25
shortDescription: Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.
requiredAction: The impacted products are end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-1010
cwes: CWE-190
cveID: CVE-2016-0984
vendorProject: Adobe
product: Flash Player and AIR
vulnerabilityName: Adobe Flash Player and AIR Use-After-Free Vulnerability
dateAdded: 2022-05-25
shortDescription: Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.
requiredAction: The impacted products are end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-0984
cwes: CWE-416
cveID: CVE-2016-0034
vendorProject: Microsoft
product: Silverlight
vulnerabilityName: Microsoft Silverlight Runtime Remote Code Execution Vulnerability
dateAdded: 2022-05-25
shortDescription: Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).
requiredAction: The impacted products are end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-0034
cwes: CWE-20
cveID: CVE-2015-0310
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player ASLR Bypass Vulnerability
dateAdded: 2022-05-25
shortDescription: Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-0310
cwes: CWE-264
cveID: CVE-2015-0016
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows TS WebProxy Directory Traversal Vulnerability
dateAdded: 2022-05-25
shortDescription: Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-0016
cwes: CWE-22
cveID: CVE-2015-0071
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer ASLR Bypass Vulnerability
dateAdded: 2022-05-25
shortDescription: Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-0071
cwes: CWE-264
cveID: CVE-2015-2360
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2022-05-25
shortDescription: Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-2360
cwes: CWE-119
cveID: CVE-2015-2425
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Memory Corruption Vulnerability
dateAdded: 2022-05-25
shortDescription: Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-2425
cwes: CWE-119
cveID: CVE-2015-1769
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Mount Manager Privilege Escalation Vulnerability
dateAdded: 2022-05-25
shortDescription: A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-1769
cwes: CWE-264
cveID: CVE-2015-4495
vendorProject: Mozilla
product: Firefox
vulnerabilityName: Mozilla Firefox Security Feature Bypass Vulnerability
dateAdded: 2022-05-25
shortDescription: Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-4495
cwes: CWE-200
cveID: CVE-2015-8651
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Integer Overflow Vulnerability
dateAdded: 2022-05-25
shortDescription: Integer overflow in Adobe Flash Player allows attackers to execute code.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-8651
cwes: CWE-189
cveID: CVE-2015-6175
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Privilege Escalation Vulnerability
dateAdded: 2022-05-25
shortDescription: The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-6175
cwes: CWE-264
cveID: CVE-2015-1671
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Remote Code Execution Vulnerability
dateAdded: 2022-05-25
shortDescription: A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-1671
cwes: CWE-19
cveID: CVE-2014-4148
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Remote Code Execution Vulnerability
dateAdded: 2022-05-25
shortDescription: A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-4148
cwes: CWE-94
cveID: CVE-2014-8439
vendorProject: Adobe
product: Flash Player
vulnerabilityName: Adobe Flash Player Dereferenced Pointer Vulnerability
dateAdded: 2022-05-25
shortDescription: Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-8439
cwes: CWE-119
cveID: CVE-2014-4123
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Privilege Escalation Vulnerability
dateAdded: 2022-05-25
shortDescription: Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-4123
cwes: CWE-264
cveID: CVE-2014-0546
vendorProject: Adobe
product: Reader and Acrobat
vulnerabilityName: Adobe Reader and Acrobat Sandbox Bypass Vulnerability
dateAdded: 2022-05-25
shortDescription: Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-0546
cveID: CVE-2014-2817
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Privilege Escalation Vulnerability
dateAdded: 2022-05-25
shortDescription: Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-2817
cwes: CWE-264
cveID: CVE-2014-4077
vendorProject: Microsoft
product: Input Method Editor (IME) Japanese
vulnerabilityName: Microsoft IME Japanese Privilege Escalation Vulnerability
dateAdded: 2022-05-25
shortDescription: Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-4077
cwes: CWE-264
cveID: CVE-2014-3153
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Privilege Escalation Vulnerability
dateAdded: 2022-05-25
shortDescription: The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-3153
cwes: CWE-269
cveID: CVE-2013-7331
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Information Disclosure Vulnerability
dateAdded: 2022-05-25
shortDescription: An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-7331
cwes: CWE-200
cveID: CVE-2013-3993
vendorProject: IBM
product: InfoSphere BigInsights
vulnerabilityName: IBM InfoSphere BigInsights Invalid Input Vulnerability
dateAdded: 2022-05-25
shortDescription: Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-3993
cwes: CWE-264
cveID: CVE-2013-3896
vendorProject: Microsoft
product: Silverlight
vulnerabilityName: Microsoft Silverlight Information Disclosure Vulnerability
dateAdded: 2022-05-25
shortDescription: Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-3896
cwes: CWE-20
cveID: CVE-2013-2423
vendorProject: Oracle
product: Java Runtime Environment (JRE)
vulnerabilityName: Oracle JRE Unspecified Vulnerability
dateAdded: 2022-05-25
shortDescription: Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-2423
cveID: CVE-2013-0431
vendorProject: Oracle
product: Java Runtime Environment (JRE)
vulnerabilityName: Oracle JRE Sandbox Bypass Vulnerability
dateAdded: 2022-05-25
shortDescription: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0431
cveID: CVE-2013-0422
vendorProject: Oracle
product: Java Runtime Environment (JRE)
vulnerabilityName: Oracle JRE Remote Code Execution Vulnerability
dateAdded: 2022-05-25
shortDescription: A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0422
cwes: CWE-264
cveID: CVE-2013-0074
vendorProject: Microsoft
product: Silverlight
vulnerabilityName: Microsoft Silverlight Double Dereference Vulnerability
dateAdded: 2022-05-25
shortDescription: Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0074
cveID: CVE-2012-1710
vendorProject: Oracle
product: Fusion Middleware
vulnerabilityName: Oracle Fusion Middleware Unspecified Vulnerability
dateAdded: 2022-05-25
shortDescription: Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-1710
cveID: CVE-2010-1428
vendorProject: Red Hat
product: JBoss
vulnerabilityName: Red Hat JBoss Information Disclosure Vulnerability
dateAdded: 2022-05-25
shortDescription: Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-1428
cwes: CWE-264
cveID: CVE-2010-0840
vendorProject: Oracle
product: Java Runtime Environment (JRE)
vulnerabilityName: Oracle JRE Unspecified Vulnerability
dateAdded: 2022-05-25
shortDescription: Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-0840
cveID: CVE-2010-0738
vendorProject: Red Hat
product: JBoss
vulnerabilityName: Red Hat JBoss Authentication Bypass Vulnerability
dateAdded: 2022-05-25
shortDescription: The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-15
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2010-0738
cwes: CWE-264
cveID: CVE-2018-8611
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Privilege Escalation Vulnerability
dateAdded: 2022-05-24
shortDescription: A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-8611
cwes: CWE-404
cveID: CVE-2018-19953
vendorProject: QNAP
product: Network Attached Storage (NAS)
vulnerabilityName: QNAP NAS File Station Cross-Site Scripting Vulnerability
dateAdded: 2022-05-24
shortDescription: A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-19953
cwes: CWE-79
CWE-80
cveID: CVE-2018-19949
vendorProject: QNAP
product: Network Attached Storage (NAS)
vulnerabilityName: QNAP NAS File Station Command Injection Vulnerability
dateAdded: 2022-05-24
shortDescription: A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-19949
cwes: CWE-20
CWE-77
CWE-78
cveID: CVE-2018-19943
vendorProject: QNAP
product: Network Attached Storage (NAS)
vulnerabilityName: QNAP NAS File Station Cross-Site Scripting Vulnerability
dateAdded: 2022-05-24
shortDescription: A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-19943
cwes: CWE-79
CWE-80
cveID: CVE-2017-0147
vendorProject: Microsoft
product: SMBv1 server
vulnerabilityName: Microsoft Windows SMBv1 Information Disclosure Vulnerability
dateAdded: 2022-05-24
shortDescription: The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0147
cwes: CWE-200
cveID: CVE-2017-0022
vendorProject: Microsoft
product: XML Core Services
vulnerabilityName: Microsoft XML Core Services Information Disclosure Vulnerability
dateAdded: 2022-05-24
shortDescription: Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0022
cwes: CWE-200
cveID: CVE-2017-0005
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
dateAdded: 2022-05-24
shortDescription: The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0005
cwes: CWE-119
cveID: CVE-2017-0149
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Memory Corruption Vulnerability
dateAdded: 2022-05-24
shortDescription: Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0149
cwes: CWE-119
cveID: CVE-2017-0210
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Privilege Escalation Vulnerability
dateAdded: 2022-05-24
shortDescription: A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0210
cveID: CVE-2017-8291
vendorProject: Artifex
product: Ghostscript
vulnerabilityName: Artifex Ghostscript Type Confusion Vulnerability
dateAdded: 2022-05-24
shortDescription: Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-8291
cwes: CWE-704
cveID: CVE-2017-8543
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Search Remote Code Execution Vulnerability
dateAdded: 2022-05-24
shortDescription: Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-8543
cwes: CWE-281
cveID: CVE-2017-18362
vendorProject: Kaseya
product: Virtual System/Server Administrator (VSA)
vulnerabilityName: Kaseya VSA SQL Injection Vulnerability
dateAdded: 2022-05-24
shortDescription: ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
requiredAction: The impacted product is end-of-life and should be disconnected if still in use.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-18362
cwes: CWE-89
cveID: CVE-2016-0162
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Information Disclosure Vulnerability
dateAdded: 2022-05-24
shortDescription: An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-0162
cwes: CWE-200
cveID: CVE-2016-3351
vendorProject: Microsoft
product: Internet Explorer and Edge
vulnerabilityName: Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
dateAdded: 2022-05-24
shortDescription: An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-3351
cwes: CWE-200
cveID: CVE-2016-4655
vendorProject: Apple
product: iOS
vulnerabilityName: Apple iOS Information Disclosure Vulnerability
dateAdded: 2022-05-24
shortDescription: The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-06-14
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-4655
cwes: CWE-200