deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1748
Published: 2016-03-24
Description: IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2016-1749
Published: 2016-03-24
Description: IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; http://www.zerodayinitiative.com/advisories/ZDI-16-206
CVE: CVE-2016-1750
Published: 2016-03-24
Description: Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1751
Published: 2016-03-24
Description: The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute permission, which allows attackers to bypass a code-signing protection mechanism via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1752
Published: 2016-03-24
Description: The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1753
Published: 2016-03-24
Description: Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1754
Published: 2016-03-24
Description: The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1755.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1755
Published: 2016-03-24
Description: The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1754.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1756
Published: 2016-03-24
Description: The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 7.8 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035353
CVE: CVE-2016-1757
Published: 2016-03-24
Description: Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035353
CVE: CVE-2016-1758
Published: 2016-03-24
Description: The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035353
CVE: CVE-2016-1759
Published: 2016-03-24
Description: The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1761
Published: 2016-03-24
Description: libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
CVE: CVE-2016-1762
Published: 2016-03-24
Description: The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-122
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1763
Published: 2016-03-24
Description: Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://www.securitytracker.com/id/1035353; https://support.apple.com/HT206166
CVE: CVE-2016-1764
Published: 2016-03-24
Description: The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1765
Published: 2016-03-24
Description: otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html; http://www.securitytracker.com/id/1035352; https://support.apple.com/HT206172
CVE: CVE-2016-1766
Published: 2016-03-24
Description: The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://www.securitytracker.com/id/1035353; http://www.zerodayinitiative.com/advisories/ZDI-16-314
CVE: CVE-2016-1767
Published: 2016-03-24
Description: QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1768.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1768
Published: 2016-03-24
Description: QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1767.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1769
Published: 2016-03-24
Description: QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1770
Published: 2016-03-24
Description: The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1771
Published: 2016-03-24
Description: The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a denial of service via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-19
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html; http://www.securityfocus.com/bid/85055; http://www.securitytracker.com/id/1035354
CVE: CVE-2016-1772
Published: 2016-03-24
Description: The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html; http://www.securityfocus.com/bid/85055; http://www.securitytracker.com/id/1035354
CVE: CVE-2016-1773
Published: 2016-03-24
Description: The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the existence of arbitrary files via unspecified vectors.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://www.securitytracker.com/id/1035363; https://support.apple.com/HT206167
CVE: CVE-2016-1774
Published: 2016-03-24
Description: The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading backup data that lacks intended restrictions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html; http://www.securityfocus.com/bid/85054; http://www.securitytracker.com/id/1035342
CVE: CVE-2016-1775
Published: 2016-03-24
Description: TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2016-1776
Published: 2016-03-24
Description: Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html; http://www.securityfocus.com/bid/85054; http://www.securitytracker.com/id/1035342
CVE: CVE-2016-1777
Published: 2016-03-24
Description: Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html; http://www.securityfocus.com/bid/85054; http://www.securitytracker.com/id/1035342
CVE: CVE-2016-1778
Published: 2016-03-24
Description: WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html; http://www.securityfocus.com/archive/1/537948/100/0/threaded
CVE: CVE-2016-1779
Published: 2016-03-24
Description: WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location data via a crafted geolocation request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html; http://www.securityfocus.com/archive/1/537948/100/0/threaded
CVE: CVE-2016-1780
Published: 2016-03-24
Description: WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://www.securitytracker.com/id/1035353; https://support.apple.com/HT206166
CVE: CVE-2016-1781
Published: 2016-03-24
Description: WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-19
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html; http://www.securityfocus.com/archive/1/537948/100/0/threaded
CVE: CVE-2016-1782
Published: 2016-03-24
Description: WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html; http://www.securityfocus.com/archive/1/537948/100/0/threaded
CVE: CVE-2016-1783
Published: 2016-03-24
Description: WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html
CVE: CVE-2016-1784
Published: 2016-03-24
Description: The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service (resource consumption and application crash) via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html
CVE: CVE-2016-1785
Published: 2016-03-24
Description: The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html; http://www.securityfocus.com/archive/1/537948/100/0/threaded
CVE: CVE-2016-1786
Published: 2016-03-24
Description: The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx (aka redirection) status code, which allows remote attackers to spoof the displayed URL, bypass the Same Origin Policy, and obtain sensitive cached information via a crafted web site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html; http://www.securityfocus.com/archive/1/537948/100/0/threaded
CVE: CVE-2016-1787
Published: 2016-03-24
Description: Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html; http://www.securityfocus.com/bid/85054; http://www.securitytracker.com/id/1035342
CVE: CVE-2016-1788
Published: 2016-03-24
Description: Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
CVE: CVE-2016-0636
Published: 2016-03-24
Description: Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component.
CVSS Score: 8.1 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00005.html
CVE: CVE-2016-1347
Published: 2016-03-24
Description: The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f; http://www.securitytracker.com/id/1035380; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f
CVE: CVE-2016-1366
Published: 2016-03-24
Description: The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service (overwrite) via unspecified vectors, aka Bug ID CSCuw75848.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs; http://www.securitytracker.com/id/1035407; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ncs
CVE: CVE-2016-2340
Published: 2016-03-25
Description: The AMF framework in Granite Data Services 3.1.1-SNAPSHOT allows remote authenticated users to read arbitrary files, send TCP requests to intranet servers, or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 5.4 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/279472; http://www.securityfocus.com/bid/85426; http://www.kb.cert.org/vuls/id/279472
CVE: CVE-2016-1160
Published: 2016-03-26
Description: Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN86517621/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000034; https://wordpress.org/plugins/wp-favorite-posts/changelog/
CVE: CVE-2016-1344
Published: 2016-03-26
Description: The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets, aka Bug ID CSCux38417.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ios-ikev2; http://www.securityfocus.com/bid/85311; http://www.securitytracker.com/id/1035382
CVE: CVE-2016-1348
Published: 2016-03-26
Description: Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-dhcpv6; http://www.securitytracker.com/id/1035381; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-dhcpv6
CVE: CVE-2016-1349
Published: 2016-03-26
Description: The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-smi; http://www.securitytracker.com/id/1035385; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-smi
CVE: CVE-2016-1350
Published: 2016-03-26
Description: Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCuj23293.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-sip; http://www.securityfocus.com/bid/85372; http://www.securitytracker.com/id/1035420