deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-5703
Published: 2016-07-03
Description: SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html; http://www.securityfocus.com/bid/91381
CVE: CVE-2016-5704
Published: 2016-07-03
Description: Cross-site scripting (XSS) vulnerability in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving a comment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpmyadmin/phpmyadmin/commit/[PII_REDACTED]2896bd6a6e5af5ba1881dd87c4a20b; https://security.gentoo.org/glsa/201701-32; https://www.phpmyadmin.net/security/PMASA-2016-20/
CVE: CVE-2016-5705
Published: 2016-07-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an "invalid JSON" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html; http://www.debian.org/security/2016/dsa-3627
CVE: CVE-2016-5706
Published: 2016-07-03
Description: js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in the scripts parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html; http://www.debian.org/security/2016/dsa-3627
CVE: CVE-2016-5730
Published: 2016-07-03
Description: phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value to FormDisplay.php, (2) incorrect data to validate.php, (3) unexpected data to Validator.php, (4) a missing config directory during setup, or (5) an incorrect OpenID identifier data type, which reveals the full path in an error message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html; http://www.securityfocus.com/bid/91379
CVE: CVE-2016-5731
Published: 2016-07-03
Description: Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html; http://www.debian.org/security/2016/dsa-3627
CVE: CVE-2016-5732
Published: 2016-07-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display_partitions.phtml in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via crafted table parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpmyadmin/phpmyadmin/commit/0815af37f483f329f0c0565d68821fea9c47b5f5; https://github.com/phpmyadmin/phpmyadmin/commit/792cd1262f012b9b13639519d414f2acaeb5e972; https://security.gentoo.org/glsa/201701-32
CVE: CVE-2016-5733
Published: 2016-07-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted table name that is mishandled during privilege checking in table_row.phtml, (2) a crafted mysqld log_bin directive that is mishandled in log_selector.phtml, (3) the Transformation implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation in js/tbl_chart.js, or (7) the zoom-search implementation in rows_zoom.phtml.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html; http://www.debian.org/security/2016/dsa-3627
CVE: CVE-2016-5734
Published: 2016-07-03
Description: phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted string, as demonstrated by the table search-and-replace implementation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.securityfocus.com/bid/91387; https://github.com/phpmyadmin/phpmyadmin/commit/1cc7466db3a05e95fe57a6702f41773e6829d54b; https://github.com/phpmyadmin/phpmyadmin/commit/4bcc606225f15bac0b07780e74f667f6ac283da7
CVE: CVE-2016-5739
Published: 2016-07-03
Description: The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html; http://www.debian.org/security/2016/dsa-3627
CVE: CVE-2015-5664
Published: 2016-07-03
Description: Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN42930233/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000119; http://www.securitytracker.com/id/1036123
CVE: CVE-2016-1227
Published: 2016-07-03
Description: NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://jvn.jp/en/jp/JVN77403442/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000105; http://web116.jp/ced/support/news/contents/2016/20160627.html
CVE: CVE-2016-1228
Published: 2016-07-03
Description: Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN45034304/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000106; http://web116.jp/ced/support/news/contents/2016/20160627.html
CVE: CVE-2016-3962
Published: 2016-07-03
Description: Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03; https://www.exploit-db.com/exploits/40120/; https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03
CVE: CVE-2016-3988
Published: 2016-07-03
Description: Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03; https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03
CVE: CVE-2016-3989
Published: 2016-07-03
Description: The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote authenticated users to obtain root privileges for writing to unspecified scripts, and consequently obtain sensitive information or modify data, by leveraging access to the nobody account.
CVSS Score: 8.1 (HIGH)
CWE: CWE-264
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03; https://www.exploit-db.com/exploits/40120/; https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03
CVE: CVE-2016-4509
Published: 2016-07-03
Description: Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/91524; http://www.zerodayinitiative.com/advisories/ZDI-16-408; https://ics-cert.us-cert.gov/advisories/ICSA-16-182-01
CVE: CVE-2016-4512
Published: 2016-07-03
Description: Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/91524; http://www.zerodayinitiative.com/advisories/ZDI-16-407; https://ics-cert.us-cert.gov/advisories/ICSA-16-182-01
CVE: CVE-2016-0221
Published: 2016-07-03
Description: Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21984323; http://www.securityfocus.com/bid/91542; http://www.securitytracker.com/id/1036221
CVE: CVE-2016-0346
Published: 2016-07-03
Description: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21984323; http://www.securityfocus.com/bid/85864; http://www.securitytracker.com/id/1036221
CVE: CVE-2016-0359
Published: 2016-07-03
Description: CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 Full before 8.5.5.10, and 8.5 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI58918; http://www-01.ibm.com/support/docview.wss?uid=swg21982526; http://www.securityfocus.com/bid/91484
CVE: CVE-2016-1328
Published: 2016-07-03
Description: goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long h_sortWireless parameter, related to a "Gateway Client List Denial of Service" issue, aka Bug ID CSCux24948.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://secorda.com/multiple-security-vulnerabilities-affecting-cisco-epc3928/; http://www.securityfocus.com/archive/1/538627/100/0/threaded; http://www.securityfocus.com/bid/91547
CVE: CVE-2016-1336
Published: 2016-07-03
Description: goform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long LanguageSelect parameter, related to a "Gateway HTTP Corruption Denial of Service" issue, aka Bug ID CSCuy28100.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://secorda.com/multiple-security-vulnerabilities-affecting-cisco-epc3928/; http://www.securityfocus.com/archive/1/538627/100/0/threaded; http://www.securityfocus.com/bid/91543
CVE: CVE-2016-1337
Published: 2016-07-03
Description: Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of the boot process, related to a "Boot Information Disclosure" issue, aka Bug ID CSCux17178.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200, CWE-264
References: http://secorda.com/multiple-security-vulnerabilities-affecting-cisco-epc3928/; http://www.securityfocus.com/archive/1/538627/100/0/threaded; http://www.securityfocus.com/bid/91541
CVE: CVE-2016-1398
Published: 2016-07-03
Description: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securitytracker.com/id/1036115; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3; http://www.securitytracker.com/id/1036115
CVE: CVE-2016-1425
Published: 2016-07-03
Description: Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID CSCun66735.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/91545; http://www.securitytracker.com/id/1036129; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios1
CVE: CVE-2016-1704
Published: 2016-07-03
Description: Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 8.8 (HIGH)
References: http://googlechromereleases.blogspot.com/2016/06/stable-channel-update_16.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00037.html
CVE: CVE-2016-2074
Published: 2016-07-03
Description: Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://openvswitch.org/pipermail/announce/2016-March/000082.html; http://openvswitch.org/pipermail/announce/2016-March/000083.html; http://rhn.redhat.com/errata/RHSA-2016-0523.html
CVE: CVE-2016-2862
Published: 2016-07-03
Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 before 8.0.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR55049; http://www-01.ibm.com/support/docview.wss?uid=swg1JR55139; http://www-01.ibm.com/support/docview.wss?uid=swg1JR55141
CVE: CVE-2016-2863
Published: 2016-07-03
Description: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR55776; http://www-01.ibm.com/support/docview.wss?uid=swg21983626; http://www.securityfocus.com/bid/91544
CVE: CVE-2016-2894
Published: 2016-07-03
Description: IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous use of a symlink during archive and retrieve actions.
CVSS Score: 2.5 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT13686; http://www-01.ibm.com/support/docview.wss?uid=swg21985579; http://www.securityfocus.com/bid/91534
CVE: CVE-2016-3955
Published: 2016-07-03
Description: The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://www.debian.org/security/2016/dsa-3607
CVE: CVE-2016-4997
Published: 2016-07-03
Description: The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce683e5f9d045e5d67d1312a42b359cb2ab2a13c; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00061.html
CVE: CVE-2016-4998
Published: 2016-07-03
Description: The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
CVE: CVE-2016-6130
Published: 2016-07-03
Description: Race condition in the sclp_ctl_ioctl_sccb function in drivers/s390/char/sclp_ctl.c in the Linux kernel before 4.6 allows local users to obtain sensitive information from kernel memory by changing a certain length value, aka a "double fetch" vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=532c34b5fbf1687df63b3fcd5b2846312ac943c6; http://www.debian.org/security/2016/dsa-3616; http://www.securityfocus.com/archive/1/538803/30/0/threaded
CVE: CVE-2016-0899
Published: 2016-07-04
Description: EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/bugtraq/2016/Jun/54; http://www.securitytracker.com/id/1036080; http://seclists.org/bugtraq/2016/Jun/54
CVE: CVE-2016-5848
Published: 2016-07-04
Description: Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-200, CWE-255
References: http://www.securityfocus.com/bid/91525; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02
CVE: CVE-2016-5849
Published: 2016-07-04
Description: Siemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration information by leveraging database stoppage.
CVSS Score: 2.5 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/91525; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-444217.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-16-182-02
CVE: CVE-2015-0899
Published: 2016-07-04
Description: The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN86448949/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000042; http://www.debian.org/security/2016/dsa-3536
CVE: CVE-2016-1181
Published: 2016-07-04
Description: ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899.
CVSS Score: 8.1 (HIGH)
References: http://jvn.jp/en/jp/JVN03188560/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000096; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html
CVE: CVE-2016-1182
Published: 2016-07-04
Description: ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a related issue to CVE-2015-0899.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN65044642/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000097; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html
CVE: CVE-2016-3092
Published: 2016-07-04
Description: The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN89379547/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000121; http://lists.opensuse.org/opensuse-updates/2016-09/msg00025.html
CVE: CVE-2016-4430
Published: 2016-07-04
Description: Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN45093481/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000111; http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282
CVE: CVE-2016-4431
Published: 2016-07-04
Description: Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks by leveraging a default method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN45093481/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000113; http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282