deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-2388
Published: 2016-02-16
Description: The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://packetstormsecurity.com/files/137128/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html; http://packetstormsecurity.com/files/145860/SAP-NetWeaver-J2EE-Engine-7.40-SQL-Injection.html; http://seclists.org/fulldisclosure/2016/May/55
CVE: CVE-2016-2389
Published: 2016-02-16
Description: Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the Path parameter to /Catalog, aka SAP Security Note 2230978.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/137046/SAP-MII-15.0-Directory-Traversal.html; http://seclists.org/fulldisclosure/2016/May/40; https://erpscan.io/advisories/erpscan-16-009-sap-xmii-directory-traversal-vulnerability/
CVE: CVE-2015-7795
Published: 2016-02-17
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN69278491/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026; https://cs.cybozu.co.jp/2015/006072.html
CVE: CVE-2015-7796
Published: 2016-02-17
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN69278491/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026; https://cs.cybozu.co.jp/2015/006072.html
CVE: CVE-2015-7797
Published: 2016-02-17
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN69278491/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026; https://cs.cybozu.co.jp/2015/006072.html
CVE: CVE-2015-7798
Published: 2016-02-17
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2016-1149, and CVE-2016-1150.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN69278491/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026; https://cs.cybozu.co.jp/2015/006072.html
CVE: CVE-2015-8483
Published: 2016-02-17
Description: Open redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
CVSS Score: 7.4 (HIGH)
References: http://jvn.jp/en/jp/JVN71428831/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000025; https://cs.cybozu.co.jp/2015/006088.html
CVE: CVE-2015-8484
Published: 2016-02-17
Description: Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a different vulnerability than CVE-2015-8485, CVE-2015-8486, and CVE-2016-1152.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN48720230/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023; https://cs.cybozu.co.jp/2016/006110.html
CVE: CVE-2015-8485
Published: 2016-02-17
Description: Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8486, and CVE-2016-1152.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN48720230/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023; https://cs.cybozu.co.jp/2015/006077.html
CVE: CVE-2015-8486
Published: 2016-02-17
Description: Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2016-1152.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN48720230/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023; https://cs.cybozu.co.jp/2015/006074.html
CVE: CVE-2015-8487
Published: 2016-02-17
Description: Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vulnerability than CVE-2015-8488.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN47296923/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000022; https://cs.cybozu.co.jp/2015/006071.html
CVE: CVE-2015-8488
Published: 2016-02-17
Description: Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability than CVE-2015-8487.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN28042424/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000021; https://cs.cybozu.co.jp/2015/006075.html
CVE: CVE-2015-8489
Published: 2016-02-17
Description: customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN20246313/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000020; https://cs.cybozu.co.jp/2015/006073.html
CVE: CVE-2016-1149
Published: 2016-02-17
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1150.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN69278491/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026; https://cs.cybozu.co.jp/2015/006072.html
CVE: CVE-2016-1150
Published: 2016-02-17
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1149.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN69278491/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026; https://cs.cybozu.co.jp/2015/006072.html
CVE: CVE-2016-1151
Published: 2016-02-17
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN64209269/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000024; https://cs.cybozu.co.jp/2016/006111.html
CVE: CVE-2016-1152
Published: 2016-02-17
Description: Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2015-8486.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN48720230/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023; https://cs.cybozu.co.jp/2015/006076.html
CVE: CVE-2016-1153
Published: 2016-02-17
Description: customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different vulnerability than CVE-2015-8489.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN20246313/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000020; https://cs.cybozu.co.jp/2016/006108.html
CVE: CVE-2013-7447
Published: 2016-02-17
Description: Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2016-03/msg00010.html; http://www.openwall.com/lists/oss-security/2016/02/10/2; http://www.openwall.com/lists/oss-security/2016/02/10/6
CVE: CVE-2016-0766
Published: 2016-02-17
Description: PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html
CVE: CVE-2016-0773
Published: 2016-02-17
Description: PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177820.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177878.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html
CVE: CVE-2016-2046
Published: 2016-02-17
Description: Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/135709/Sophos-UTM-9-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Feb/60; http://www.halock.com/blog/cve-2016-2046-cross-site-scripting-sophos-utm-9/
CVE: CVE-2016-2071
Published: 2016-02-17
Description: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://support.citrix.com/article/CTX206001; http://www.securitytracker.com/id/1035098; http://support.citrix.com/article/CTX206001
CVE: CVE-2016-2072
Published: 2016-02-17
Description: The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-254
References: http://support.citrix.com/article/CTX206001; http://www.securitytracker.com/id/1035098; http://support.citrix.com/article/CTX206001
CVE: CVE-2016-2396
Published: 2016-02-17
Description: The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to configuration input.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-77
References: http://www.securitytracker.com/id/1035015; http://www.zerodayinitiative.com/advisories/ZDI-16-164; https://support.software.dell.com/product-notification/185943
CVE: CVE-2016-2397
Published: 2016-02-17
Description: The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securitytracker.com/id/1035015; http://www.zerodayinitiative.com/advisories/ZDI-16-163; https://support.software.dell.com/product-notification/185943
CVE: CVE-2016-1333
Published: 2016-02-17
Description: Cisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service (device reload) via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-grid; http://www.securitytracker.com/id/1035035; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-grid
CVE: CVE-2016-1334
Published: 2016-02-17
Description: Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-wap; http://www.securitytracker.com/id/1035036; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-wap
CVE: CVE-2016-2398
Published: 2016-02-17
Description: Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-254
References: http://www.kb.cert.org/vuls/id/418072; http://www.wired.com/2016/01/xfinitys-security-system-flaws-open-homes-to-thieves/; https://community.rapid7.com/community/infosec/blog/2016/01/05/r7-2015-23-comcast-xfinity-home-security-system-insecure-fail-open
CVE: CVE-2015-8286
Published: 2016-02-18
Description: Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-254
References: http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html; http://seclists.org/bugtraq/2015/Jun/117; http://www.forbes.com/sites/andygreenberg/2013/01/28/more-than-a-dozen-brands-of-security-camera-systems-vulnerable-to-hacker-hijacking/
CVE: CVE-2015-8287
Published: 2016-02-18
Description: Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified URL.
CVSS Score: 5.3 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/923388; http://www.kb.cert.org/vuls/id/923388
CVE: CVE-2016-0716
Published: 2016-02-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0729. Reason: This candidate is a reservation duplicate of CVE-2016-0729. Notes: All CVE users should reference CVE-2016-0729 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-0717
Published: 2016-02-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0729. Reason: This candidate is a reservation duplicate of CVE-2016-0729. Notes: All CVE users should reference CVE-2016-0729 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-0722
Published: 2016-02-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2015-7547
Published: 2016-02-18
Description: Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html
CVE: CVE-2016-0794
Published: 2016-02-18
Description: The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178036.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00110.html; http://lists.opensuse.org/opensuse-updates/2016-07/msg00050.html
CVE: CVE-2016-0795
Published: 2016-02-18
Description: LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178036.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00110.html; http://lists.opensuse.org/opensuse-updates/2016-07/msg00050.html
CVE: CVE-2015-5970
Published: 2016-02-18
Description: The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-94
References: http://www.zerodayinitiative.com/advisories/ZDI-16-167; https://www.novell.com/support/kb/doc.php?id=7017240; http://www.zerodayinitiative.com/advisories/ZDI-16-167
CVE: CVE-2015-8148
Published: 2016-02-18
Description: The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/83271; http://www.securitytracker.com/id/1035063; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160218_00
CVE: CVE-2015-8149
Published: 2016-02-18
Description: The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory corruption and service outage) via crafted requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/83270; http://www.securitytracker.com/id/1035063; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160218_00
CVE: CVE-2015-8150
Published: 2016-02-18
Description: Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/83269; http://www.securitytracker.com/id/1035063; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160218_00
CVE: CVE-2015-8151
Published: 2016-02-18
Description: Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/83268; http://www.securitytracker.com/id/1035063; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160218_00
CVE: CVE-2016-0068
Published: 2016-02-18
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0069.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1034971; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009; http://www.securitytracker.com/id/1034971
CVE: CVE-2016-0069
Published: 2016-02-18
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0068.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN78383854/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000028.html; http://www.securityfocus.com/bid/82665
CVE: CVE-2016-1987
Published: 2016-02-18
Description: HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1035026; https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04974114; http://www.securitytracker.com/id/1035026
CVE: CVE-2016-2509
Published: 2016-02-18
Description: The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/507216; https://www.belden.com/resourcecenter/security/upload/Belden_Security_Advisory_BSECV-2016-2_1v0.pdf; http://www.kb.cert.org/vuls/id/507216
CVE: CVE-2015-3825
Published: 2016-02-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-3837. Reason: This candidate is a reservation duplicate of CVE-2015-3837. Notes: All CVE users should reference CVE-2015-3837 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-2270
Published: 2016-02-19
Description: Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html; http://www.debian.org/security/2016/dsa-3519
CVE: CVE-2016-2271
Published: 2016-02-19
Description: VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html; http://support.citrix.com/article/CTX209443
CVE: CVE-2015-7769
Published: 2016-02-19
Description: baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: http://basercms.net/security/JVN69854312; http://jvn.jp/en/jp/JVN69854312/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000030