deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1697
Published: 2016-06-05
Description: The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
CVE: CVE-2016-1698
Published: 2016-06-05
Description: The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
CVE: CVE-2016-1699
Published: 2016-06-05
Description: WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
CVE: CVE-2016-1700
Published: 2016-06-05
Description: extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
CVE: CVE-2016-1701
Published: 2016-06-05
Description: The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1690.
CVSS Score: 8.8 (HIGH)
References: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
CVE: CVE-2016-1702
Published: 2016-06-05
Description: The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
CVE: CVE-2016-1703
Published: 2016-06-05
Description: Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 8.8 (HIGH)
References: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html
CVE: CVE-2016-4347
Published: 2016-06-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-7558.  Reason: This candidate is a reservation duplicate of CVE-2015-7558.  Notes: All CVE users should reference CVE-2015-7558 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2015-5041
Published: 2016-06-06
Description: The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html
CVE: CVE-2014-8177
Published: 2016-06-07
Description: The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which exceed the limit when combined.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2015-1845.html; http://rhn.redhat.com/errata/RHSA-2015-1846.html; http://www.openwall.com/lists/oss-security/2015/08/27/5
CVE: CVE-2014-9746
Published: 2016-06-07
Description: The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix function in type42/t42parse.c, and (4) ps_parser_load_field function in psaux/psobjs.c in FreeType before 2.5.4 do not check return values, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted font.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8b281f83e[PII_REDACTED]f92dbf90940ac44bd45e1; http://www.debian.org/security/2015/dsa-3370; http://www.openwall.com/lists/oss-security/2015/09/11/4
CVE: CVE-2014-9747
Published: 2016-06-07
Description: The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service (infinite loop) via a Type42 font.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/src/type42/t42parse.c?id=8b281f83e[PII_REDACTED]f92dbf90940ac44bd45e1; http://www.debian.org/security/2015/dsa-3370; http://www.openwall.com/lists/oss-security/2015/09/11/4
CVE: CVE-2015-5228
Published: 2016-06-07
Description: The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2015-09/msg00030.html; http://www.openwall.com/lists/oss-security/2015/08/25/5; https://bugzilla.redhat.com/show_bug.cgi?id=1255782
CVE: CVE-2015-5231
Published: 2016-06-07
Description: The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-updates/2015-09/msg00030.html; http://www.openwall.com/lists/oss-security/2015/08/25/5; https://bugzilla.redhat.com/show_bug.cgi?id=1256728
CVE: CVE-2015-5260
Published: 2016-06-07
Description: Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.freedesktop.org/archives/spice-devel/2015-October/022191.html; http://rhn.redhat.com/errata/RHSA-2015-1889.html; http://rhn.redhat.com/errata/RHSA-2015-1890.html
CVE: CVE-2015-5261
Published: 2016-06-07
Description: Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://lists.freedesktop.org/archives/spice-devel/2015-October/022191.html; http://rhn.redhat.com/errata/RHSA-2015-1889.html; http://rhn.redhat.com/errata/RHSA-2015-1890.html
CVE: CVE-2015-5723
Published: 2016-06-07
Description: Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://framework.zend.com/security/advisory/ZF2015-07; http://www.debian.org/security/2015/dsa-3369; http://www.doctrine-project.org/2015/08/31/security_misconfiguration_vulnerability_in_various_doctrine_projects.html
CVE: CVE-2015-7611
Published: 2016-06-07
Description: Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/133798/Apache-James-Server-2.3.2-Arbitrary-Command-Execution.html; http://packetstormsecurity.com/files/156463/Apache-James-Server-2.3.2-Insecure-User-Creation-Arbitrary-File-Write.html; http://www.openwall.com/lists/oss-security/2015/09/30/7
CVE: CVE-2015-7695
Published: 2016-06-07
Description: The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://framework.zend.com/security/advisory/ZF2015-08; http://www.debian.org/security/2015/dsa-3369; http://www.openwall.com/lists/oss-security/2015/09/30/6
CVE: CVE-2016-2335
Published: 2016-06-07
Description: The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00004.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00098.html
CVE: CVE-2016-4437
Published: 2016-06-07
Description: Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-321
References: http://packetstormsecurity.com/files/137310/Apache-Shiro-1.2.4-Information-Disclosure.html; http://packetstormsecurity.com/files/157497/Apache-Shiro-1.2.4-Remote-Code-Execution.html; http://rhn.redhat.com/errata/RHSA-2016-2035.html
CVE: CVE-2016-4450
Published: 2016-06-07
Description: os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html; http://www.debian.org/security/2016/dsa-3592; http://www.securityfocus.com/bid/90967
CVE: CVE-2016-4962
Published: 2016-06-07
Description: The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264
References: http://www.debian.org/security/2016/dsa-3633; http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2[PII_REDACTED].html; http://www.securityfocus.com/bid/91006
CVE: CVE-2016-4963
Published: 2016-06-07
Description: The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management tool confusion) by manipulating information in the backend directories in xenstore.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284
References: http://www.securitytracker.com/id/1036024; http://xenbits.xen.org/xsa/advisory-178.html; https://lists.debian.org/debian-lts-announce/2018/09/msg00006.html
CVE: CVE-2016-5242
Published: 2016-06-07
Description: The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion.
CVSS Score: 5.6 (MEDIUM)
References: http://www.debian.org/security/2016/dsa-3633; http://www.securityfocus.com/bid/91015; http://www.securitytracker.com/id/1036035
CVE: CVE-2013-7440
Published: 2016-06-07
Description: The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-19
References: http://seclists.org/oss-sec/2015/q2/483; http://seclists.org/oss-sec/2015/q2/523; http://www.securityfocus.com/bid/74707
CVE: CVE-2016-3072
Published: 2016-06-07
Description: Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow remote authenticated users to execute arbitrary SQL commands via the (1) sort_by or (2) sort_order parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://access.redhat.com/errata/RHSA-2016:1083; https://bugzilla.redhat.com/show_bug.cgi?id=1322050; https://github.com/Katello/katello/pull/6051
CVE: CVE-2016-3087
Published: 2016-06-07
Description: Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via vectors related to an ! (exclamation mark) operator to the REST Plugin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://struts.apache.org/docs/s2-033.html; http://www-01.ibm.com/support/docview.wss?uid=swg21987854; http://www.securityfocus.com/bid/90960
CVE: CVE-2016-3093
Published: 2016-06-07
Description: Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://struts.apache.org/docs/s2-034.html; http://www-01.ibm.com/support/docview.wss?uid=swg21987854; http://www.securityfocus.com/bid/90961
CVE: CVE-2016-4545
Published: 2016-06-07
Description: Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service (resource consumption and Traffic Management Microkernel restart) via an SSL alert during the handshake.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1036025; https://support.f5.com/kb/en-us/solutions/public/k/48/sol48042976.html; http://www.securitytracker.com/id/1036025
CVE: CVE-2015-8157
Published: 2016-06-08
Description: SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/90889; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00; http://www.securityfocus.com/bid/90889
CVE: CVE-2015-8798
Published: 2016-06-08
Description: Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVSS Score: 8.0 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/90884; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00; http://www.securityfocus.com/bid/90884
CVE: CVE-2015-8799
Published: 2016-06-08
Description: Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to write update-package data to arbitrary agent locations via unspecified vectors.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/90885; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00; http://www.securityfocus.com/bid/90885
CVE: CVE-2015-8800
Published: 2016-06-08
Description: Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allow remote authenticated users to conduct argument-injection attacks by leveraging certain named-pipe access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74
References: http://www.securityfocus.com/bid/90886; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00; http://www.securityfocus.com/bid/90886
CVE: CVE-2016-1405
Published: 2016-06-08
Description: libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160531-wsa-esa; http://www.securityfocus.com/bid/90968; http://www.securitytracker.com/id/1035993
CVE: CVE-2016-1418
Published: 2016-06-08
Description: Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug ID CSCuy64037.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160606-aap; http://www.securitytracker.com/id/1036042; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160606-aap
CVE: CVE-2016-2017
Published: 2016-06-08
Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
CVSS Score: 8.1 (HIGH)
References: https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
CVE: CVE-2016-2018
Published: 2016-06-08
Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
References: https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
CVE: CVE-2016-2019
Published: 2016-06-08
Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
CVSS Score: 8.1 (HIGH)
References: https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
CVE: CVE-2016-2020
Published: 2016-06-08
Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
CVSS Score: 8.1 (HIGH)
References: https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
CVE: CVE-2016-2021
Published: 2016-06-08
Description: HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2022, and CVE-2016-2030.
CVSS Score: 8.1 (HIGH)
References: https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05131085; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380