rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-8024 
Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to obtain sensitive information via the server HTTP response spoofing.
Problem types: description: Improper neutralization of CRLF sequences in HTTP headers vulnerability
Affected products: vendor: Intel
product: VirusScan Enterprise Linux (VSEL)
Published: 2017-03-14T22:00:00.000Z
CVE-2016-8025 
SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to obtain product information via a crafted HTTP request parameter.
Problem types: description: SQL injection vulnerability
Affected products: vendor: Intel
product: VirusScan Enterprise Linux (VSEL)
Published: 2017-03-14T22:00:00.000Z
CVE-2016-8026 
Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows authenticated users to gain elevated privileges via unspecified vectors.
Problem types: description: Arbitrary command execution vulnerability
Affected products: vendor: Intel
product: McAfee Security Scan Plus (SSP)
Published: 2017-03-14T22:00:00.000Z
CVE-2016-8027 
SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.
Problem types: description: SQL injection vulnerability
Affected products: vendor: n/a
product: McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier
Published: 2017-03-14T22:00:00.000Z
CVE-2016-8030 
A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link.
Problem types: description: A memory corruption vulnerability
Affected products: vendor: McAfee
product: VirusScan Enterprise
Published: 2017-04-25T16:00:00.000Z
CVE-2016-8031 
Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local security protection via a crafted input file.
Problem types: description: Software Integrity Attacks vulnerability
Affected products: vendor: Intel
product: Anti-Virus Engine (AVE)
Published: 2017-03-28T15:00:00.000Z
CVE-2016-8032 
Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file.
Problem types: description: Software Integrity Attacks vulnerability
Affected products: vendor: Intel
product: Anti-Virus Engine (AVE)
Published: 2017-03-31T21:00:00.000Z
CVE-2016-8100 
Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-10T16:00:00.000Z
CVE-2016-8101 
The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-10T16:00:00.000Z
CVE-2016-8102 
Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch processes with elevated privileges.
Problem types: description: Elevated Privilege
Affected products: vendor: Intel
product: Intel Wireless Bluetooth Drivers
Published: 2016-12-08T17:00:00.000Z
CVE-2016-8103 
SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform.
Problem types: description: Elevated Privilege
Affected products: vendor: Intel
product: NUC Kits
Published: 2016-12-08T17:00:00.000Z
CVE-2016-8104 
Buffer overflow in Intel PROSet/Wireless Software and Drivers in versions before 19.20.3 allows a local user to crash iframewrk.exe causing a potential denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Intel
product: Intel PROSet/Wireless Software and Drivers
Published: 2016-12-08T17:00:00.000Z
CVE-2016-8105 
Drivers for the Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families before version 22.0 are vulnerable to a denial of service in certain layer 2 network configurations.
Problem types: description: Denial of Service
Affected products: vendor: Intel
product: Intel Ethernet Controller X710 family and Intel Ethernet Controller XL710 family
Published: 2017-02-27T18:00:00.000Z
CVE-2016-8106 
A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.
Problem types: description: Denial of Service
Affected products: vendor: Intel
product: IntelÂ® Ethernet Controller X710 family and IntelÂ® Ethernet Controller XL710 family
Published: 2017-01-09T21:00:00.000Z
CVE-2016-8201 
A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Brocade Virtual Traffic Manager versions released prior to and including 11.0
Published: 2017-01-14T19:00:00.000Z
CVE-2016-8202 
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected versions, non-root users can gain root access with a combination of shell commands and parameters.
Problem types: description: Privilege escalation.
Affected products: vendor: Brocade Communications Systems, Inc.
product: Fibre Channel SAN products running Brocade Fabric OS (FOS).
Published: 2017-05-08T18:00:00.000Z
CVE-2016-8203 
A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, and 6.0.00a images could allow attackers to cause a denial of service (line card reset) via certain constructed IPsec control packets.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Brocade MLX running on NetIron OS All Brocade MLX Line Cards running NetIron OS 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00 and 6.0.00a images
Published: 2016-10-31T21:00:00.000Z
CVE-2016-8204 
A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.
Problem types: description: Directory Traversal
Affected products: vendor: n/a
product: Brocade Network Advisor versions released prior to and including 14.0.2
Published: 2017-01-14T19:00:00.000Z
CVE-2016-8205 
A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.
Problem types: description: Directory Traversal
Affected products: vendor: n/a
product: Brocade Network Advisor versions released prior to and including 14.0.2
Published: 2017-01-14T19:00:00.000Z
CVE-2016-8206 
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.
Problem types: description: Directory Traversal
Affected products: vendor: n/a
product: Brocade Network Advisor versions released prior to and including 14.0.2
Published: 2017-01-14T19:00:00.000Z
CVE-2016-8207 
A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information.
Problem types: description: Directory Traversal
Affected products: vendor: n/a
product: Brocade Network Advisor versions released prior to and including 14.0.2
Published: 2017-01-14T19:00:00.000Z
CVE-2016-8209 
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.
Problem types: description: Denial of Service Attack
Affected products: vendor: Brocade Communications Systems, Inc.
product: NetIron XMR/MLX and Brocade CES/CER on NetIron
Published: 2017-05-08T18:00:00.000Z
CVE-2016-8211 
EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Path Traversal Vulnerability
Affected products: vendor: n/a
product: EMC Data Protection Advisor EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446
Published: 2017-02-03T07:24:00.000Z
CVE-2016-8212 
An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These specify a validity period; however, both values are optional. Crypto-J treats the lack of a nextUpdate as indicating that the OCSP response is valid indefinitely instead of restricting its validity for a brief period surrounding the thisUpdate time. This vulnerability is similar to the issue described in CVE-2015-4748.
Problem types: description: Improper OCSP Validation Vulnerability
Affected products: vendor: n/a
product: RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2
Published: 2017-02-03T07:24:00.000Z
CVE-2016-8213 
EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Stored Cross-Site Scripting
Affected products: vendor: n/a
product: EMC Documentum Webtop and Clients
Published: 2017-01-23T06:49:00.000Z
CVE-2016-8214 
EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 contain a vulnerability that may allow malicious administrators to compromise Avamar servers.
Problem types: description: Privilege Escalation Vulnerability
Affected products: vendor: n/a
product: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1
Published: 2017-01-25T11:00:00.000Z
CVE-2016-8215 
EMC RSA Security Analytics 10.5.3 and 10.6.2 contains fixes for a Reflected Cross-Site Scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Reflected Cross-Site Scripting Vulnerability
Affected products: vendor: n/a
product: EMC RSA Security Analytics versions prior to 10.6.2
Published: 2017-01-25T11:00:00.000Z
CVE-2016-8216 
EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Problem types: description: Command Injection Vulnerability
Affected products: vendor: n/a
product: EMC Data Domain DD OS EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10
Published: 2017-02-03T07:24:00.000Z
CVE-2016-8217 
EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A possible timing attack could be carried out by modifying a PKCS#12 file that has an integrity MAC for which the password is not known. An attacker could then feed the modified PKCS#12 file to the toolkit and guess the current MAC one byte at a time. This is possible because Crypto-J uses a non-constant-time method to compare the stored MAC with the calculated MAC. This vulnerability is similar to the issue described in CVE-2015-2601.
Problem types: description: PKCS#12 Timing Attack Vulnerability
Affected products: vendor: n/a
product: RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2
Published: 2017-02-03T07:24:00.000Z
CVE-2016-8218 
An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.
Problem types: description: Unauthenticated JWT signing algorithm in routing
Affected products: vendor: n/a
product: Cloud Foundry
Published: 2017-06-13T06:00:00.000Z
CVE-2016-8219 
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privileged with the ability to restage applications. This could cause application downtime if the restage fails.
Problem types: description: over-privilege
Affected products: vendor: n/a
product: Cloud Foundry
Published: 2017-06-13T06:00:00.000Z
CVE-2016-8220 
Pivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an information disclosure vulnerability. The application inadvertently exposed WAN replication credentials at a public route.
Problem types: description: Information disclosure
Affected products: vendor: Pivotal
product: Gemfire for PCF
Published: 2018-04-18T16:00:00.000Z
CVE-2016-8221 
Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code.
Problem types: description: unspecified
Affected products: vendor: Lenovo Group Ltd.
product: XClarity Administrator (LXCA)
Published: 2017-01-12T22:00:00.000Z
CVE-2016-8222 
A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services. This could lead to a denial of service attack or allow certain BIOS variables or settings to be altered (such as boot sequence). The setting or changing of BIOS passwords is not affected by this vulnerability.
Problem types: description: Microsoft Device Guard protection bypass
Affected products: vendor: Lenovo Group Ltd.
product: ThinkPad systems
Published: 2016-11-30T15:00:00.000Z
CVE-2016-8223 
During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges.
Problem types: description: Lenovo System Interface Foundation Privilege Escalation?
Affected products: vendor: Lenovo Group Ltd.
product: All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID.
Published: 2016-11-29T20:00:00.000Z
CVE-2016-8224 
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
Problem types: description: Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems
Affected products: vendor: Lenovo Group Ltd.
product: Lenovo Notebook models 110-14IBR/110-15IBR, B70-80, E31-80, E40-80, E41-80, E51-80, G40-80, G50-80, G50-80 Touch, Ideapad 300-14IBR/300-15IBR, Ideapad 300-14ISK/300-15ISK/300-17ISK, Ideapad 510S-12ISK, K21-80, K41-80, MIIX 710-12IKB , XiaoXin Air 12, YOGA 510-14ISK/510-15ISK, YOGA 710-11IKB, Yoga 710-11ISK, Yoga 900-13ISK, YOGA 900S-12ISK; ThinkServer models ThinkServer TS150, ThinkServer TS450
Published: 2016-11-29T20:00:00.000Z
CVE-2016-8225 
Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges.
Problem types: description: Unquoted service path privilege escalation
Affected products: vendor: Lenovo Group Ltd.
product: Edge and Slim USB Keyboard Driver
Published: 2017-01-26T17:00:00.000Z
CVE-2016-8226 
The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.
Problem types: description: Denial of service
Affected products: vendor: Lenovo Group Ltd.
product: System X M5, M6, and X6 BIOS
Published: 2017-01-26T17:00:00.000Z
CVE-2016-8227 
Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local users to execute code with elevated privileges.
Problem types: description: Privilege escalation
Affected products: vendor: Lenovo Group Ltd.
product: Transition application
Published: 2017-01-26T17:00:00.000Z
CVE-2016-8228 
In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges.
Problem types: description: Privilege Escalation
Affected products: vendor: Lenovo Group Ltd.
product: Service Bridge
Published: 2017-06-03T00:00:00.000Z
CVE-2016-8229 
A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed.
Problem types: description: CSRF
Affected products: vendor: Lenovo Group Ltd.
product: Service Bridge
Published: 2017-06-03T00:00:00.000Z
CVE-2016-8230 
In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers.
Problem types: description: Insecure HTTP connection
Affected products: vendor: Lenovo Group Ltd.
product: Service Bridge
Published: 2017-06-03T00:00:00.000Z
CVE-2016-8231 
In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate.
Problem types: description: Insecure code signing certificate validation
Affected products: vendor: Lenovo Group Ltd.
product: Service Bridge
Published: 2017-06-03T00:00:00.000Z
CVE-2016-8232 
Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Management Module (AMM) versions earlier than 66Z of Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 allows an unauthenticated attacker with access to the AMM's IP address to send a crafted URL that could inject a malicious script to access a user's AMM data such as cookies or other session information.
Problem types: description: DOM-Based XSS
Affected products: vendor: n/a
product: Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 Earlier than 66Z
Published: 2017-03-01T21:00:00.000Z
CVE-2016-8233 
Log files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user.
Problem types: description: Credential disclosure
Affected products: vendor: Lenovo Group Ltd.
product: XClarity Administrator
Published: 2017-03-01T22:00:00.000Z
CVE-2016-8235 
Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges.
Problem types: description: Privilege Escalation
Affected products: vendor: Lenovo Group Ltd.
product: Customer Care Software Development Kit (CCSDK)
Published: 2017-04-10T19:00:00.000Z
CVE-2016-8236 
Reset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350 during a prolonged broadcast storm in TSM versions earlier than 3.77.
Problem types: description: Reset of ThinkServer TSM to defaults
Affected products: vendor: Lenovo Group Ltd.
product: ThinkServer RD350, RD450, RD550, RD650, TD350
Published: 2017-03-03T18:00:00.000Z
CVE-2016-8237 
Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitrary code.
Problem types: description: Remote code execution
Affected products: vendor: Lenovo Group Ltd.
product: Lenovo Updates
Published: 2017-04-10T19:00:00.000Z
CVE-2016-8271 
Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL.
Problem types: description: information leak
Affected products: vendor: n/a
product: eSpace IAD V300R002C01SPC100 and earlier versions
Published: 2017-04-02T20:00:00.000Z
CVE-2016-8272 
Huawei PC client software HiSuite 4.0.5.300_OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks.
Problem types: description: information leak
Affected products: vendor: n/a
product: HiSuite 4.0.5.300_OVE
Published: 2017-04-02T20:00:00.000Z
CVE-2016-8273 
Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.
Problem types: description: a man-in-the-middle (MITM)
Affected products: vendor: n/a
product: HiSuite 4.0.5.300_OVE
Published: 2017-04-02T20:00:00.000Z
CVE-2016-8274 
Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.
Problem types: description: dynamic link library (DLL) hijack
Affected products: vendor: n/a
product: HiSuite 4.0.5.300_OVE
Published: 2017-04-02T20:00:00.000Z
CVE-2016-8275 
Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb.
Problem types: description: XML Bomb
Affected products: vendor: n/a
product: AnyOffice V200R006C00
Published: 2017-04-02T20:00:00.000Z