deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-4395
Published: 2016-10-28
Description: HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93961; http://www.zerodayinitiative.com/advisories/ZDI-16-587; https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
CVE: CVE-2016-4396
Published: 2016-10-28
Description: HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93961; http://www.zerodayinitiative.com/advisories/ZDI-16-588; https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
CVE: CVE-2016-3060
Published: 2016-10-29
Description: Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI64063; http://www-01.ibm.com/support/docview.wss?uid=swg1PI64064; http://www-01.ibm.com/support/docview.wss?uid=swg1PI67537
CVE: CVE-2016-5920
Published: 2016-10-29
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI67537; http://www-01.ibm.com/support/docview.wss?uid=swg21989060; http://www.securityfocus.com/bid/92634
CVE: CVE-2016-7504
Published: 2016-10-29
Description: A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://bugs.ghostscript.com/show_bug.cgi?id=697142; http://www.securityfocus.com/bid/94241; http://bugs.ghostscript.com/show_bug.cgi?id=697142
CVE: CVE-2016-7505
Published: 2016-10-29
Description: A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A successful exploitation of this issue can lead to code execution or denial of service condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://bugs.ghostscript.com/show_bug.cgi?id=697140; http://www.securityfocus.com/bid/94231; http://bugs.ghostscript.com/show_bug.cgi?id=697140
CVE: CVE-2016-7506
Published: 2016-10-29
Description: An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de840997f4a. A successful exploitation of this issue can lead to code execution or denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://bugs.ghostscript.com/show_bug.cgi?id=697141; http://www.securityfocus.com/bid/94241; http://bugs.ghostscript.com/show_bug.cgi?id=697141
CVE: CVE-2016-9112
Published: 2016-10-29
Description: Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: http://www.securityfocus.com/bid/93978; https://github.com/uclouvain/openjpeg/issues/855; https://lists.debian.org/debian-lts-announce/2019/07/msg00010.html
CVE: CVE-2016-9113
Published: 2016-10-30
Description: There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/93980; https://github.com/uclouvain/openjpeg/issues/856; https://security.gentoo.org/glsa/201710-26
CVE: CVE-2016-9114
Published: 2016-10-30
Description: There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/93979; https://github.com/uclouvain/openjpeg/issues/857; https://security.gentoo.org/glsa/201710-26
CVE: CVE-2016-9115
Published: 2016-10-30
Description: Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93977; https://github.com/uclouvain/openjpeg/issues/858; https://security.gentoo.org/glsa/201710-26
CVE: CVE-2016-9116
Published: 2016-10-30
Description: NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/93975; https://github.com/uclouvain/openjpeg/issues/859; https://security.gentoo.org/glsa/201710-26
CVE: CVE-2016-9117
Published: 2016-10-30
Description: NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/93783; https://github.com/uclouvain/openjpeg/issues/860; https://security.gentoo.org/glsa/201710-26
CVE: CVE-2016-9118
Published: 2016-10-30
Description: Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-4013; http://www.securityfocus.com/bid/93976; https://github.com/uclouvain/openjpeg/issues/861
CVE: CVE-2016-7964
Published: 2016-10-31
Description: The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: http://www.securityfocus.com/bid/94245; https://github.com/splitbrain/dokuwiki/issues/1708; http://www.securityfocus.com/bid/94245
CVE: CVE-2016-7965
Published: 2016-10-31
Description: DokuWiki 2016-06-26a and older uses $_SERVER[HTTP_HOST] instead of the baseurl setting as part of the password-reset URL. This can lead to phishing attacks. (A remote unauthenticated attacker can change the URL's hostname via the HTTP Host header.) The vulnerability can be triggered only if the Host header is not part of the web server routing process (e.g., if several domains are served by the same web server).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94237; https://github.com/splitbrain/dokuwiki/issues/1709; http://www.securityfocus.com/bid/94237
CVE: CVE-2016-7988
Published: 2016-10-31
Description: On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.[Samsung].android.intent.action.SET_WIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a subset of SVE-2016-6542.
CVSS Score: 7.5 (HIGH)
CWE: CWE-275, CWE-388
References: http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016; http://www.securityfocus.com/bid/94081; http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016
CVE: CVE-2016-7989
Published: 2016-10-31
Description: On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runtime to continually crash, rendering the device unusable until a factory reset is performed, a subset of SVE-2016-6542.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016; http://www.securityfocus.com/bid/94082; http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016
CVE: CVE-2016-7990
Published: 2016-10-31
Description: On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) leading to a heap corruption that can result in Denial of Service and potentially remote code execution, a subset of SVE-2016-6542.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-388
References: http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016; http://www.securityfocus.com/bid/94086; http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016
CVE: CVE-2016-7991
Published: 2016-10-31
Description: On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized configuration changes, a subset of SVE-2016-6542.
CVSS Score: 7.5 (HIGH)
CWE: CWE-388
References: http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016; http://www.securityfocus.com/bid/94088; http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016
CVE: CVE-2016-8856
Published: 2016-10-31
Description: Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default, allowing an attacker to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both.
CVSS Score: 7.8 (HIGH)
CWE: CWE-275
References: http://www.securityfocus.com/bid/93608; http://www.securitytracker.com/id/1037101; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2016-8875
Published: 2016-10-31
Description: The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image, aka "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ConvertToPDF_x86!CreateFXPDFConvertor."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/93608; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securityfocus.com/bid/93608
CVE: CVE-2016-8876
Published: 2016-10-31
Description: Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document, aka "Read Access Violation starting at FoxitReader."
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/93608; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securityfocus.com/bid/93608
CVE: CVE-2016-8877
Published: 2016-10-31
Description: Heap buffer overflow (Out-of-Bounds write) vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted JPEG2000 image embedded in a PDF document, aka a "corrupted suffix pattern" issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/93608; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securityfocus.com/bid/93608
CVE: CVE-2016-8878
Published: 2016-10-31
Description: Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return value starting at FOXITREADER."
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/93608; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securityfocus.com/bid/93608
CVE: CVE-2016-8879
Published: 2016-10-31
Description: The thumbnail shell extension plugin (FoxitThumbnailHndlr_x86.dll) in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted JPEG2000 image embedded in a PDF document, aka an "Exploitable - Heap Corruption" issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/93608; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securityfocus.com/bid/93608
CVE: CVE-2016-8203
Published: 2016-10-31
Description: A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, and 6.0.00a images could allow attackers to cause a denial of service (line card reset) via certain constructed IPsec control packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.brocade.com/en/backend-content/pdf-page.html?/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2016-168.pdf; http://www.securityfocus.com/bid/94232; http://www.securitytracker.com/id/1037010
CVE: CVE-2016-7855
Published: 2016-11-01
Description: Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-2119.html; http://www.securityfocus.com/bid/93861; http://www.securitytracker.com/id/1037111
CVE: CVE-2016-8864
Published: 2016-11-02
Description: named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://rhn.redhat.com/errata/RHSA-2016-2141.html; http://rhn.redhat.com/errata/RHSA-2016-2142.html; http://rhn.redhat.com/errata/RHSA-2016-2615.html
CVE: CVE-2015-8968
Published: 2016-11-03
Description: git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www.securityfocus.com/bid/81433; https://github.com/square/git-fastclone/pull/2; https://hackerone.com/reports/104465
CVE: CVE-2015-8969
Published: 2016-11-03
Description: git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "git clone " commands in the library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securityfocus.com/bid/81433; https://github.com/square/git-fastclone/pull/5; https://hackerone.com/reports/105190
CVE: CVE-2016-4025
Published: 2016-11-03
Description: Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-254
References: https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/; https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/
CVE: CVE-2016-7095
Published: 2016-11-03
Description: Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.exponentcms.org/news/security-vulnerability-all-exponent-versions-june-2016; http://www.securityfocus.com/bid/94121; https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0
CVE: CVE-2016-7160
Published: 2016-11-03
Description: A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://security.samsungmobile.com/smrupdate.html#SMR-SEP-2016; http://www.securityfocus.com/bid/94120; http://security.samsungmobile.com/smrupdate.html#SMR-SEP-2016
CVE: CVE-2016-7402
Published: 2016-11-03
Description: SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc import_sproc SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/92950; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-017/?fid=8409; http://www.securityfocus.com/bid/92950
CVE: CVE-2016-7452
Published: 2016-11-03
Description: The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: http://www.securityfocus.com/bid/93045; https://github.com/exponentcms/exponent-cms/commit/c1092f167cc6c78dc8bf9bf149946c5219413df3; https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0
CVE: CVE-2016-7453
Published: 2016-11-03
Description: The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/93045; https://github.com/exponentcms/exponent-cms/commit/c1092f167cc6c78dc8bf9bf149946c5219413df3; http://www.securityfocus.com/bid/93045
CVE: CVE-2016-9086
Published: 2016-11-03
Description: GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files (tar). All GitLab versions prior to 8.13.0 restricted this feature to administrators only. Starting with version 8.13.0 this feature was made available to all users. This feature did not properly check for symbolic links in user-provided archives and therefore it was possible for an authenticated user to retrieve the contents of any file accessible to the GitLab service account. This included sensitive files such as those that contain secret tokens used by the GitLab service to authenticate users. GitLab CE and EE versions 8.13.0 through 8.13.2, 8.12.0 through 8.12.7, 8.11.0 through 8.11.10, 8.10.0 through 8.10.12, and 8.9.0 through 8.9.11 are affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94136; https://about.gitlab.com/2016/11/02/cve-2016-9086-patches/; http://www.securityfocus.com/bid/94136
CVE: CVE-2016-9134
Published: 2016-11-03
Description: Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. Impact is Information Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-200
References: http://www.securityfocus.com/bid/94127; https://github.com/exponentcms/exponent-cms/commit/45a7a62797e64e8abbae35d4859097c26f1874b1; https://github.com/exponentcms/exponent-cms/commit/d5c3c175b60bd26b2b74ec85b8f0d2544db2c8db
CVE: CVE-2016-9135
Published: 2016-11-03
Description: Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter. Impact is Information Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-200
References: http://www.securityfocus.com/bid/94127; https://github.com/exponentcms/exponent-cms/commit/d5c3c175b60bd26b2b74ec85b8f0d2544db2c8db; http://www.securityfocus.com/bid/94127
CVE: CVE-2016-9136
Published: 2016-11-03
Description: Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the "crafted JavaScript" approach, related to a "Buffer Over-read" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bugs.ghostscript.com/show_bug.cgi?id=697244; http://www.securityfocus.com/bid/94223; http://bugs.ghostscript.com/show_bug.cgi?id=697244
CVE: CVE-2016-6429
Published: 2016-11-03
Description: A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. More Information: CSCva47092. Known Affected Releases: 4.10(1).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/93915; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics1; http://www.securityfocus.com/bid/93915
CVE: CVE-2016-6430
Published: 2016-11-03
Description: A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticated, local attacker to elevate the privilege level associated with their session. More Information: CSCva38636. Known Affected Releases: 4.10(1). Known Fixed Releases: 5.0(1).
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93919; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics2; http://www.securityfocus.com/bid/93919
CVE: CVE-2016-6441
Published: 2016-11-03
Description: A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers (ASR902, ASR903, and ASR907) that are running the following releases of Cisco IOS XE Software: 3.17.0S 3.17.1S 3.17.2S 3.18.0S 3.18.1S. More Information: CSCuy15175. Known Affected Releases: 15.6(1)S 15.6(2)S. Known Fixed Releases: 15.6(1)S2.12 15.6(1.17)S0.41 15.6(1.17)SP 15.6(2)SP 16.4(0.183) 16.5(0.10).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94072; http://www.securitytracker.com/id/1037179; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-tl1
CVE: CVE-2016-6447
Published: 2016-11-03
Description: A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior to 1.9.3, Cisco Meeting App releases prior to 1.9.8, Acano Meeting Apps releases prior to 1.8.35. More Information: CSCva75942 CSCvb67878. Known Affected Releases: 1.81.92.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94073; http://www.securitytracker.com/id/1037180; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-cms