deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-5976
Published: 2016-09-26
Description: The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to discover component passwords via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990216; http://www.securityfocus.com/bid/93134; http://www.securityfocus.com/bid/93136
CVE: CVE-2016-5977
Published: 2016-09-26
Description: Open redirect vulnerability in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-601
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990216; http://www.securityfocus.com/bid/93139; http://www-01.ibm.com/support/docview.wss?uid=swg21990216
CVE: CVE-2016-5978
Published: 2016-09-26
Description: Cross-site scripting (XSS) vulnerability in the Web UI in the web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-5975.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990216; http://www.securityfocus.com/bid/93140; http://www-01.ibm.com/support/docview.wss?uid=swg21990216
CVE: CVE-2016-5996
Published: 2016-09-26
Description: The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length restrictions, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990216; http://www.securityfocus.com/bid/93138; http://www-01.ibm.com/support/docview.wss?uid=swg21990216
CVE: CVE-2016-5997
Published: 2016-09-26
Description: The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not apply password-quality rules to password changes, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-640
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990216; http://www.securityfocus.com/bid/93144; http://www-01.ibm.com/support/docview.wss?uid=swg21990216
CVE: CVE-2016-3110
Published: 2016-09-26
Description: mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-1648.html; http://rhn.redhat.com/errata/RHSA-2016-1649.html; http://rhn.redhat.com/errata/RHSA-2016-1650.html
CVE: CVE-2016-4303
Published: 2016-09-26
Description: The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://blog.talosintel.com/2016/06/esnet-vulnerability.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00082.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00090.html
CVE: CVE-2016-4993
Published: 2016-09-26
Description: CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93, CWE-113
References: http://rhn.redhat.com/errata/RHSA-2016-1838.html; http://rhn.redhat.com/errata/RHSA-2016-1839.html; http://rhn.redhat.com/errata/RHSA-2016-1840.html
CVE: CVE-2016-5395
Published: 2016-09-26
Description: Cross-site scripting (XSS) vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92577; https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger; http://www.securityfocus.com/bid/92577
CVE: CVE-2016-5406
Published: 2016-09-26
Description: The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RBAC configuration to all slaves.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2016-1838.html; http://rhn.redhat.com/errata/RHSA-2016-1839.html; http://rhn.redhat.com/errata/RHSA-2016-1840.html
CVE: CVE-2016-6276
Published: 2016-09-26
Description: Citrix Linux Virtual Delivery Agent (aka VDA, formerly Linux Virtual Desktop) before 1.4.0 allows local users to gain root privileges via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://support.citrix.com/article/CTX216628; http://www.securityfocus.com/bid/93000; http://support.citrix.com/article/CTX216628
CVE: CVE-2016-6840
Published: 2016-09-26
Description: Cross-site scripting (XSS) vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLogin_CgiEntry and possibly other unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/138061/Huawei-ISM-Professional-Cross-Site-Scripting.html; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160818-01-ism-en; http://www.securityfocus.com/bid/92554
CVE: CVE-2016-7098
Published: 2016-09-26
Description: Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00083.html; http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00134.html; http://lists.opensuse.org/opensuse-updates/2016-09/msg00044.html
CVE: CVE-2016-8279
Published: 2016-09-26
Description: The video driver in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B362, CRR-UL20 before CRR-UL20C00B362, CRR-CL00 before CRR-CL00C92B362, and CRR-CL20 before CRR-CL20C92B362; P8 smartphones with software GRA-TL00 before GRA-TL00C01B366, GRA-UL00 before GRA-UL00C00B366, GRA-UL10 before GRA-UL10C00B366, and GRA-CL00 before GRA-CL00C92B366; and Honor 6 and Honor 6 Plus smartphones with software before 6.9.16 allows attackers to cause a denial of service (device reboot) via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-smartphone-en; http://www.securityfocus.com/bid/93096; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-smartphone-en
CVE: CVE-2016-5746
Published: 2016-09-26
Description: libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00032.html; http://www.securityfocus.com/bid/93169; https://bugzilla.suse.com/show_bug.cgi?id=986971
CVE: CVE-2016-6518
Published: 2016-09-26
Description: Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of malformed packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-sep-en; http://www.securityfocus.com/bid/92968; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-sep-en
CVE: CVE-2016-7142
Published: 2016-09-26
Description: The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-264
References: http://www.debian.org/security/2016/dsa-3662; http://www.inspircd.org/2016/09/03/v2023-released.html; http://www.openwall.com/lists/oss-security/2016/09/04/3
CVE: CVE-2016-7162
Published: 2016-09-26
Description: The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://ftp.gnome.org/mirror/gnome.org/sources/file-roller/3.20/file-roller-3.20.3.news; http://ftp.gnome.org/mirror/gnome.org/sources/file-roller/3.21/file-roller-3.21.90.news; http://www.openwall.com/lists/oss-security/2016/09/08/4
CVE: CVE-2016-3639
Published: 2016-09-26
Description: SAP HANA DB 1.00.091.00[PII_REDACTED] allows remote attackers to obtain sensitive topology information via an unspecified HTTP request, aka SAP Security Note 2176128.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://onapsis.com/research/security-advisories/sap-hana-get-topology-information-disclosure; http://packetstormsecurity.com/files/138428/SAP-HANA-1.00.091.00[PII_REDACTED]-Information-Disclosure.html; http://seclists.org/fulldisclosure/2016/Aug/83
CVE: CVE-2016-4972
Published: 2016-09-26
Description: OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/06/23/8; https://bugs.launchpad.net/murano/+bug/1586079; https://bugs.launchpad.net/python-muranoclient/+bug/1586078
CVE: CVE-2016-6142
Published: 2016-09-26
Description: SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459.
CVSS Score: 7.5 (HIGH)
References: http://onapsis.com/research/security-advisories/sap-hana-arbitrary-audit-injection-sql-protocol; http://packetstormsecurity.com/files/138441/SAP-HANA-DB-1.00.73.00.389160-SAP-Protocol-Audit-Injection.html; http://seclists.org/fulldisclosure/2016/Aug/89
CVE: CVE-2016-6153
Published: 2016-09-26
Description: os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2016-08/msg00053.html; http://www.openwall.com/lists/oss-security/2016/07/01/1; http://www.openwall.com/lists/oss-security/2016/07/01/2
CVE: CVE-2016-6172
Published: 2016-09-26
Description: PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-updates/2016-08/msg00085.html; http://www.debian.org/security/2016/dsa-3664; http://www.openwall.com/lists/oss-security/2016/07/06/3
CVE: CVE-2016-6826
Published: 2016-09-26
Description: Huawei AnyMail before 2.6.0301.0060 allows remote attackers to cause a denial of service (application crash) via a crafted compressed email attachment.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-anymail-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-anymail-en
CVE: CVE-2016-6827
Published: 2016-09-26
Description: Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-fusioncompute-en; http://www.securityfocus.com/bid/92626; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-fusioncompute-en
CVE: CVE-2016-6901
Published: 2016-09-26
Description: Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-en; http://www.securityfocus.com/bid/92618; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-en
CVE: CVE-2016-6913
Published: 2016-09-26
Description: Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2016/Aug/122; http://www.securityfocus.com/bid/92632; https://www.alienvault.com/forums/discussion/7558/
CVE: CVE-2016-6038
Published: 2016-09-26
Description: Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://aix.software.ibm.com/aix/efixes/security/pconsole_mitigation.asc; http://www.securityfocus.com/bid/93180; http://www.securitytracker.com/id/1036887
CVE: CVE-2016-6980
Published: 2016-09-26
Description: Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4263.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/93179; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-6304
Published: 2016-09-26
Description: Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html
CVE: CVE-2016-6305
Published: 2016-09-26
Description: The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://www-01.ibm.com/support/docview.wss?uid=swg21995039; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2016-6306
Published: 2016-09-26
Description: The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html
CVE: CVE-2016-6307
Published: 2016-09-26
Description: The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://www-01.ibm.com/support/docview.wss?uid=swg21995039; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2016-6308
Published: 2016-09-26
Description: statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://www-01.ibm.com/support/docview.wss?uid=swg21995039; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2016-6309
Published: 2016-09-26
Description: statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://www-01.ibm.com/support/docview.wss?uid=swg21995039; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2016-7052
Published: 2016-09-26
Description: crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html; http://www-01.ibm.com/support/docview.wss?uid=swg21995039
CVE: CVE-2016-7554
Published: 2016-09-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2016-4058
Published: 2016-09-27
Description: Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to "special characters on pages."
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-policycenter-en; http://www.securityfocus.com/bid/86546; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-policycenter-en
CVE: CVE-2016-4978
Published: 2016-09-27
Description: The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: http://mail-archives.apache.org/mod_mbox/activemq-users/201609.mbox/%3CCAH6wpnqzeNtpykT7emtDU1-GV7AvjFP5-YroWcCC4UZyQEFvtA%40mail.gmail.com%3E; http://www.securityfocus.com/bid/93142; https://access.redhat.com/errata/RHSA-2017:1834
CVE: CVE-2016-6137
Published: 2016-09-27
Description: An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591.
CVSS Score: 9.8 (CRITICAL)
References: http://onapsis.com/research/security-advisories/sap-trex-remote-command-execution; http://packetstormsecurity.com/files/138436/SAP-TREX-7.10-Revision-63-Remote-Command-Execution.html; http://seclists.org/fulldisclosure/2016/Aug/113
CVE: CVE-2016-6146
Published: 2016-09-27
Description: The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://onapsis.com/research/security-advisories/sap-trex-tns-information-disclosure-nameserver; http://packetstormsecurity.com/files/138445/SAP-TREX-7.10-Revision-63-NameServer-TNS-Information-Disclosure.html; http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review
CVE: CVE-2016-6330
Published: 2016-09-27
Description: The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3737.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/92568; https://bugzilla.redhat.com/show_bug.cgi?id=1368864; https://www.tenable.com/security/research/tra-2016-22
CVE: CVE-2016-7044
Published: 2016-09-27
Description: The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3672; http://www.securitytracker.com/id/1036868; http://www.ubuntu.com/usn/USN-3086-1
CVE: CVE-2016-7045
Published: 2016-09-27
Description: The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3672; http://www.securitytracker.com/id/1036868; http://www.ubuntu.com/usn/USN-3086-1
CVE: CVE-2016-7444
Published: 2016-09-27
Description: The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html; http://www.securityfocus.com/bid/92893; https://access.redhat.com/errata/RHSA-2017:2292